Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1225new in the last 7 days
- 5added as actively exploited
- 75critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2018-20062 Exploited |
Not yet scored | ThinkPHP noneCms Operating systems & software |
ThinkPHP "noneCms" Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-1870 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-38003 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-16013 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Incorrect Implementation Vulnerabililty | 3 Nov 2021 |
| CVE-2021-30665 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-30762 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-0041 Exploited |
Not yet scored | Android Android Kernel Operating systems & software |
Android Kernel Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2020-1472 Exploited |
Not yet scored | Microsoft Netlogon Operating systems & software |
Microsoft Netlogon Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2017-11882 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-1040 Exploited |
Not yet scored | Microsoft Hyper-V RemoteFX Operating systems & software |
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0803 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-0986 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-17144 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30116 Exploited |
Not yet scored | Kaseya Virtual System/Server Administrator (VSA) Operating systems & software |
Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-9859 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30663 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30761 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-30869 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2018-7600 Exploited |
Not yet scored | Drupal Drupal Core Operating systems & software |
Drupal Core Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-3398 Exploited |
Not yet scored | Atlassian Confluence Server and Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-26084 Exploited |
Not yet scored | Atlassian Confluence Server and Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-3396 Exploited |
Not yet scored | Atlassian Confluence Server and Data Server Operating systems & software |
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-29557 Exploited |
Not yet scored | D-Link DIR-825 R1 Devices Operating systems & software |
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2018-15811 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2018-18325 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.