Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-48788 Exploited |
Not yet scored | Fortinet FortiClient EMS Network & security devices |
Fortinet FortiClient EMS SQL Injection Vulnerability | 25 Mar 2024 |
| CVE-2021-44529 Exploited |
Not yet scored | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Cloud & SaaS |
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | 25 Mar 2024 |
| CVE-2024-27198 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Authentication Bypass Vulnerability | 7 Mar 2024 |
| CVE-2024-23225 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 6 Mar 2024 |
| CVE-2024-23296 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 6 Mar 2024 |
| CVE-2021-36380 Exploited |
Not yet scored | Sunhillo SureLine Operating systems & software |
Sunhillo SureLine OS Command Injection Vulnerablity | 5 Mar 2024 |
| CVE-2023-21237 Exploited |
Not yet scored | Android Pixel Operating systems & software |
Android Pixel Information Disclosure Vulnerability | 5 Mar 2024 |
| CVE-2024-21338 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | 4 Mar 2024 |
| CVE-2023-29360 Exploited |
Not yet scored | Microsoft Streaming Service Operating systems & software |
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | 29 Feb 2024 |
| CVE-2024-1709 Exploited |
Not yet scored | ConnectWise ScreenConnect Operating systems & software |
ConnectWise ScreenConnect Authentication Bypass Vulnerability | 22 Feb 2024 |
| CVE-2020-3259 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Information Disclosure Vulnerability | 15 Feb 2024 |
| CVE-2024-21410 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Privilege Escalation Vulnerability | 15 Feb 2024 |
| CVE-2024-21412 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | 13 Feb 2024 |
| CVE-2024-21351 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 13 Feb 2024 |
| CVE-2023-43770 Exploited |
Not yet scored | Roundcube Webmail Applications & supply chain |
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 12 Feb 2024 |
| CVE-2024-21762 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Out-of-Bound Write Vulnerability | 9 Feb 2024 |
| CVE-2023-4762 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 6 Feb 2024 |
| CVE-2024-21893 Exploited |
Not yet scored | Ivanti Connect Secure, Policy Secure, and Neurons OT, ICS & IoT |
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | 31 Jan 2024 |
| CVE-2022-48618 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 31 Jan 2024 |
| CVE-2023-22527 Exploited |
Not yet scored | Atlassian Confluence Data Center and Server Operating systems & software |
Atlassian Confluence Data Center and Server Template Injection Vulnerability | 24 Jan 2024 |
| CVE-2024-23222 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Type Confusion Vulnerability | 23 Jan 2024 |
| CVE-2023-34048 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Out-of-Bounds Write Vulnerability | 22 Jan 2024 |
| CVE-2023-35082 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | 18 Jan 2024 |
| CVE-2023-6548 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 17 Jan 2024 |
| CVE-2023-6549 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 17 Jan 2024 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.