Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-36761 Exploited |
Not yet scored | Microsoft Word Operating systems & software |
Microsoft Word Information Disclosure Vulnerability | 12 Sep 2023 |
| CVE-2023-41061 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Operating systems & software |
Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | 11 Sep 2023 |
| CVE-2023-41064 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 11 Sep 2023 |
| CVE-2023-33246 Exploited |
Not yet scored | Apache RocketMQ Operating systems & software |
Apache RocketMQ Command Execution Vulnerability | 6 Sep 2023 |
| CVE-2023-32315 Exploited |
Not yet scored | Ignite Realtime Openfire Operating systems & software |
Ignite Realtime Openfire Path Traversal Vulnerability | 24 Aug 2023 |
| CVE-2023-38831 Exploited |
Not yet scored | RARLAB WinRAR Operating systems & software |
RARLAB WinRAR Code Execution Vulnerability | 24 Aug 2023 |
| CVE-2023-27532 Exploited |
Not yet scored | Veeam Backup & Replication Cloud & SaaS |
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | 22 Aug 2023 |
| CVE-2023-38035 Exploited |
Not yet scored | Ivanti Sentry Network & security devices |
Ivanti Sentry Authentication Bypass Vulnerability | 22 Aug 2023 |
| CVE-2023-26359 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 21 Aug 2023 |
| CVE-2023-24489 Exploited |
Not yet scored | Citrix Content Collaboration Network & security devices |
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 16 Aug 2023 |
| CVE-2023-38180 Exploited |
Not yet scored | Microsoft .NET Core and Visual Studio Operating systems & software |
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | 9 Aug 2023 |
| CVE-2017-18368 Exploited |
Not yet scored | Zyxel P660HN-T1A Routers Network & security devices |
Zyxel P660HN-T1A Routers Command Injection Vulnerability | 7 Aug 2023 |
| CVE-2023-35081 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 31 Jul 2023 |
| CVE-2023-37580 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 27 Jul 2023 |
| CVE-2023-38606 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Kernel Unspecified Vulnerability | 26 Jul 2023 |
| CVE-2023-35078 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 25 Jul 2023 |
| CVE-2023-29298 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Improper Access Control Vulnerability | 20 Jul 2023 |
| CVE-2023-38205 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Improper Access Control Vulnerability | 20 Jul 2023 |
| CVE-2023-3519 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 19 Jul 2023 |
| CVE-2023-36884 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Search Remote Code Execution Vulnerability | 17 Jul 2023 |
| CVE-2023-37450 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Code Execution Vulnerability | 13 Jul 2023 |
| CVE-2022-29303 Exploited |
Not yet scored | SolarView Compact Operating systems & software |
SolarView Compact Command Injection Vulnerability | 13 Jul 2023 |
| CVE-2023-32046 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | 11 Jul 2023 |
| CVE-2023-32049 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | 11 Jul 2023 |
| CVE-2023-35311 Exploited |
Not yet scored | Microsoft Outlook Operating systems & software |
Microsoft Outlook Security Feature Bypass Vulnerability | 11 Jul 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.