Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 832new in the last 7 days
- 6added as actively exploited
- 59critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-10199 Exploited |
Not yet scored | Sonatype Nexus Repository Operating systems & software |
Sonatype Nexus Repository Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8468 Exploited |
Not yet scored | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents Operating systems & software |
Trend Micro Multiple Products Content Validation Escape Vulnerability | 3 Nov 2021 |
| CVE-2021-36741 Exploited |
Not yet scored | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2019-20085 Exploited |
Not yet scored | TVT NVMS-1000 Operating systems & software |
TVT NVMS-1000 Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-5849 Exploited |
Not yet scored | Unraid Unraid Operating systems & software |
Unraid Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-8599 Exploited |
Not yet scored | Trend Micro Apex One and OfficeScan Operating systems & software |
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2019-5544 Exploited |
Not yet scored | VMware VMware ESXi and Horizon DaaS Operating systems & software |
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-3992 Exploited |
Not yet scored | VMware ESXi Operating systems & software |
VMware ESXi OpenSLP Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-9082 Exploited |
Not yet scored | ThinkPHP ThinkPHP Operating systems & software |
ThinkPHP Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-18187 Exploited |
Not yet scored | Trend Micro OfficeScan Operating systems & software |
Trend Micro OfficeScan Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-8467 Exploited |
Not yet scored | Trend Micro Apex One and OfficeScan Operating systems & software |
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-36742 Exploited |
Not yet scored | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2021-27561 Exploited |
Not yet scored | Yealink Device Management Operating systems & software |
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2021-21985 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2019-8394 Exploited |
Not yet scored | Zoho ManageEngine Operating systems & software |
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 3 Nov 2021 |
| CVE-2021-22005 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-3952 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-16013 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Incorrect Implementation Vulnerabililty | 3 Nov 2021 |
| CVE-2021-38003 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-30116 Exploited |
Not yet scored | Kaseya Virtual System/Server Administrator (VSA) Operating systems & software |
Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-17144 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-0986 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-0803 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-1040 Exploited |
Not yet scored | Microsoft Hyper-V RemoteFX Operating systems & software |
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2017-11882 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.