Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-27876 Exploited |
Not yet scored | Veritas Backup Exec Agent Operating systems & software |
Veritas Backup Exec Agent File Access Vulnerability | 7 Apr 2023 |
| CVE-2021-27877 Exploited |
Not yet scored | Veritas Backup Exec Agent Operating systems & software |
Veritas Backup Exec Agent Improper Authentication Vulnerability | 7 Apr 2023 |
| CVE-2019-1388 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | 7 Apr 2023 |
| CVE-2021-27878 Exploited |
Not yet scored | Veritas Backup Exec Agent Operating systems & software |
Veritas Backup Exec Agent Command Execution Vulnerability | 7 Apr 2023 |
| CVE-2022-27926 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 3 Apr 2023 |
| CVE-2022-3038 Exploited |
Not yet scored | Google Chromium Network Service Operating systems & software |
Google Chromium Network Service Use-After-Free Vulnerability | 30 Mar 2023 |
| CVE-2023-0266 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Use-After-Free Vulnerability | 30 Mar 2023 |
| CVE-2021-30900 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 30 Mar 2023 |
| CVE-2013-3163 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 30 Mar 2023 |
| CVE-2023-26360 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 15 Mar 2023 |
| CVE-2023-24880 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 14 Mar 2023 |
| CVE-2023-23397 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Outlook Privilege Escalation Vulnerability | 14 Mar 2023 |
| CVE-2020-5741 Exploited |
Not yet scored | Plex Media Server Operating systems & software |
Plex Media Server Remote Code Execution Vulnerability | 10 Mar 2023 |
| CVE-2022-28810 Exploited |
Not yet scored | Zoho ManageEngine Operating systems & software |
Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | 7 Mar 2023 |
| CVE-2022-33891 Exploited |
Not yet scored | Apache Spark Operating systems & software |
Apache Spark Command Injection Vulnerability | 7 Mar 2023 |
| CVE-2022-47986 Exploited |
Not yet scored | IBM Aspera Faspex Operating systems & software |
IBM Aspera Faspex Code Execution Vulnerability | 21 Feb 2023 |
| CVE-2022-41223 Exploited |
Not yet scored | Mitel MiVoice Connect Operating systems & software |
Mitel MiVoice Connect Code Injection Vulnerability | 21 Feb 2023 |
| CVE-2022-46169 Exploited |
Not yet scored | Cacti Cacti Operating systems & software |
Cacti Command Injection Vulnerability | 16 Feb 2023 |
| CVE-2023-23376 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 14 Feb 2023 |
| CVE-2023-21715 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Publisher Security Feature Bypass Vulnerability | 14 Feb 2023 |
| CVE-2023-23529 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Type Confusion Vulnerability | 14 Feb 2023 |
| CVE-2023-21823 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Graphic Component Privilege Escalation Vulnerability | 14 Feb 2023 |
| CVE-2023-0669 Exploited |
Not yet scored | Fortra GoAnywhere MFT Operating systems & software |
Fortra GoAnywhere MFT Remote Code Execution Vulnerability | 10 Feb 2023 |
| CVE-2022-24990 Exploited |
Not yet scored | TerraMaster TerraMaster OS Operating systems & software |
TerraMaster OS Remote Command Execution Vulnerability | 10 Feb 2023 |
| CVE-2017-11357 Exploited |
Not yet scored | Telerik User Interface (UI) for ASP.NET AJAX Operating systems & software |
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability | 26 Jan 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.