Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2024-0519 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 17 Jan 2024 |
| CVE-2018-15133 Exploited |
Not yet scored | Laravel Laravel Framework Operating systems & software |
Laravel Deserialization of Untrusted Data Vulnerability | 16 Jan 2024 |
| CVE-2024-21887 Exploited |
Not yet scored | Ivanti Connect Secure and Policy Secure OT, ICS & IoT |
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | 10 Jan 2024 |
| CVE-2023-46805 Exploited |
Not yet scored | Ivanti Connect Secure and Policy Secure OT, ICS & IoT |
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | 10 Jan 2024 |
| CVE-2023-29357 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Privilege Escalation Vulnerability | 10 Jan 2024 |
| CVE-2023-23752 Exploited |
Not yet scored | Joomla! Joomla! Operating systems & software |
Joomla! Improper Access Control Vulnerability | 8 Jan 2024 |
| CVE-2023-27524 Exploited |
Not yet scored | Apache Superset Operating systems & software |
Apache Superset Insecure Default Initialization of Resource Vulnerability | 8 Jan 2024 |
| CVE-2023-29300 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 8 Jan 2024 |
| CVE-2023-38203 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 8 Jan 2024 |
| CVE-2023-41990 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Code Execution Vulnerability | 8 Jan 2024 |
| CVE-2016-20017 Exploited |
Not yet scored | D-Link DSL-2750B Devices Operating systems & software |
D-Link DSL-2750B Devices Command Injection Vulnerability | 8 Jan 2024 |
| CVE-2023-7024 Exploited |
Not yet scored | Google Chromium WebRTC Applications & supply chain |
Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 2 Jan 2024 |
| CVE-2023-7101 Exploited |
Not yet scored | Spreadsheet::ParseExcel Spreadsheet::ParseExcel Operating systems & software |
Spreadsheet::ParseExcel Remote Code Execution Vulnerability | 2 Jan 2024 |
| CVE-2023-47565 Exploited |
Not yet scored | QNAP VioStor NVR Operating systems & software |
QNAP VioStor NVR OS Command Injection Vulnerability | 21 Dec 2023 |
| CVE-2023-49897 Exploited |
Not yet scored | FXC AE1021, AE1021PE Operating systems & software |
FXC AE1021, AE1021PE OS Command Injection Vulnerability | 21 Dec 2023 |
| CVE-2023-6448 Exploited |
Not yet scored | Unitronics Vision PLC and HMI OT, ICS & IoT |
Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 11 Dec 2023 |
| CVE-2023-41266 Exploited |
Not yet scored | Qlik Sense Operating systems & software |
Qlik Sense Path Traversal Vulnerability | 7 Dec 2023 |
| CVE-2023-41265 Exploited |
Not yet scored | Qlik Sense Operating systems & software |
Qlik Sense HTTP Tunneling Vulnerability | 7 Dec 2023 |
| CVE-2023-33107 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 5 Dec 2023 |
| CVE-2023-33106 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 5 Dec 2023 |
| CVE-2023-33063 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 5 Dec 2023 |
| CVE-2022-22071 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 5 Dec 2023 |
| CVE-2023-42916 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 4 Dec 2023 |
| CVE-2023-42917 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 4 Dec 2023 |
| CVE-2023-49103 Exploited |
Not yet scored | ownCloud ownCloud graphapi Applications & supply chain |
ownCloud graphapi Information Disclosure Vulnerability | 30 Nov 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.