Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1225new in the last 7 days
- 5added as actively exploited
- 75critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-36742 Exploited |
Not yet scored | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2019-20085 Exploited |
Not yet scored | TVT NVMS-1000 Operating systems & software |
TVT NVMS-1000 Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-8467 Exploited |
Not yet scored | Trend Micro Apex One and OfficeScan Operating systems & software |
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27561 Exploited |
Not yet scored | Yealink Device Management Operating systems & software |
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2021-21985 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2019-8394 Exploited |
Not yet scored | Zoho ManageEngine Operating systems & software |
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 3 Nov 2021 |
| CVE-2021-22005 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server File Upload Vulnerability | 3 Nov 2021 |
| CVE-2019-18935 Exploited |
Not yet scored | Progress Telerik UI for ASP.NET AJAX Operating systems & software |
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2020-3952 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-1147 Exploited |
Not yet scored | Microsoft .NET Framework, SharePoint, Visual Studio Operating systems & software |
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0541 Exploited |
Not yet scored | Microsoft MSHTML Operating systems & software |
Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-5735 Exploited |
Not yet scored | Amcrest Cameras and Network Video Recorder (NVR) Operating systems & software |
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30860 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-7961 Exploited |
Not yet scored | Liferay Liferay Portal Operating systems & software |
Liferay Portal Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2018-4878 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-8644 Exploited |
Not yet scored | PlaySMS PlaySMS Operating systems & software |
PlaySMS Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-0601 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows CryptoAPI Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2020-14883 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-14882 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21017 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-27104 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-28550 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2018-4939 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2018-15961 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Unrestricted File Upload Vulnerability | 3 Nov 2021 |
| CVE-2021-27102 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.