Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 886new in the last 7 days
- 6added as actively exploited
- 63critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2016-7200 Exploited |
Not yet scored | Microsoft Edge Operating systems & software |
Microsoft Edge Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2016-0189 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2022-1096 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 28 Mar 2022 |
| CVE-2022-0543 Exploited |
Not yet scored | Redis Debian-specific Redis Servers Operating systems & software |
Debian-specific Redis Server Lua Sandbox Escape Vulnerability | 28 Mar 2022 |
| CVE-2018-8414 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Shell Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-25223 Exploited |
Not yet scored | Sophos SG UTM Operating systems & software |
Sophos SG UTM Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-2506 Exploited |
Not yet scored | QNAP Systems Helpdesk Operating systems & software |
QNAP Helpdesk Improper Access Control Vulnerability | 25 Mar 2022 |
| CVE-2020-1956 Exploited |
Not yet scored | Apache Kylin Operating systems & software |
Apache Kylin OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2019-15107 Exploited |
Not yet scored | Webmin Webmin Operating systems & software |
Webmin Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2022-26143 Exploited |
Not yet scored | Mitel MiCollab, MiVoice Business Express Operating systems & software |
MiCollab, MiVoice Business Express Access Control Vulnerability | 25 Mar 2022 |
| CVE-2022-21999 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2021-42237 Exploited |
Not yet scored | Sitecore XP Operating systems & software |
Sitecore XP Remote Command Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-9054 Exploited |
Not yet scored | Zyxel Multiple Network-Attached Storage (NAS) Devices Operating systems & software |
Zyxel Multiple NAS Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2020-7247 Exploited |
Not yet scored | OpenBSD OpenSMTPD Operating systems & software |
OpenSMTPD Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2010-4344 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Heap-Based Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2017-12617 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-12615 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat on Windows Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-0146 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SMB Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2018-1273 Exploited |
Not yet scored | VMware Tanzu Spring Data Commons Operating systems & software |
VMware Tanzu Spring Data Commons Property Binder Vulnerability | 25 Mar 2022 |
| CVE-2018-6961 Exploited |
Not yet scored | VMware SD-WAN Edge Operating systems & software |
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2019-0903 Exploited |
Not yet scored | Microsoft Graphics Device Interface (GDI) Operating systems & software |
Microsoft GDI Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-0752 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2013-2251 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Improper Input Validation Vulnerability | 25 Mar 2022 |
| CVE-2014-6287 Exploited |
Not yet scored | Rejetto HTTP File Server (HFS) Operating systems & software |
Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-4171 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.