Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1225new in the last 7 days
- 5added as actively exploited
- 75critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-36955 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2015-4852 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2020-14750 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2012-3152 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2019-9082 Exploited |
Not yet scored | ThinkPHP ThinkPHP Operating systems & software |
ThinkPHP Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-3643 Exploited |
Not yet scored | SolarWinds Virtualization Manager Operating systems & software |
SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-14871 Exploited |
Not yet scored | Oracle Solaris and Zettabyte File System (ZFS) Operating systems & software |
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2018-2380 Exploited |
Not yet scored | SAP Customer Relationship Management (CRM) Operating systems & software |
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-16009 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2020-6207 Exploited |
Not yet scored | SAP Solution Manager Operating systems & software |
SAP Solution Manager Missing Authentication for Critical Function Vulnerability | 3 Nov 2021 |
| CVE-2019-16256 Exploited |
Not yet scored | SIMalliance Toolbox Browser Operating systems & software |
SIMalliance Toolbox Browser Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-35211 Exploited |
Not yet scored | SolarWinds Serv-U Operating systems & software |
SolarWinds Serv-U Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-11652 Exploited |
Not yet scored | SaltStack Salt Operating systems & software |
SaltStack Salt Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-35464 Exploited |
Not yet scored | ForgeRock Access Management (AM) Operating systems & software |
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-11651 Exploited |
Not yet scored | SaltStack Salt Operating systems & software |
SaltStack Salt Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2018-6789 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-10199 Exploited |
Not yet scored | Sonatype Nexus Repository Operating systems & software |
Sonatype Nexus Repository Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-18988 Exploited |
Not yet scored | TeamViewer Desktop Operating systems & software |
TeamViewer Desktop Bypass Remote Login Vulnerability | 3 Nov 2021 |
| CVE-2021-36741 Exploited |
Not yet scored | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2019-5544 Exploited |
Not yet scored | VMware VMware ESXi and Horizon DaaS Operating systems & software |
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-3992 Exploited |
Not yet scored | VMware ESXi Operating systems & software |
VMware ESXi OpenSLP Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-5849 Exploited |
Not yet scored | Unraid Unraid Operating systems & software |
Unraid Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2019-18187 Exploited |
Not yet scored | Trend Micro OfficeScan Operating systems & software |
Trend Micro OfficeScan Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-8468 Exploited |
Not yet scored | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents Operating systems & software |
Trend Micro Multiple Products Content Validation Escape Vulnerability | 3 Nov 2021 |
| CVE-2020-8599 Exploited |
Not yet scored | Trend Micro Apex One and OfficeScan Operating systems & software |
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.