Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1489new in the last 7 days
- 4added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-20085 Exploited |
Not yet scored | TVT NVMS-1000 Operating systems & software |
TVT NVMS-1000 Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-5849 Exploited |
Not yet scored | Unraid Unraid Operating systems & software |
Unraid Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2019-16759 Exploited |
Not yet scored | vBulletin vBulletin Applications & supply chain |
vBulletin PHP Module Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-17496 Exploited |
Not yet scored | vBulletin vBulletin Cloud & SaaS |
vBulletin PHP Module Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-5544 Exploited |
Not yet scored | VMware VMware ESXi and Horizon DaaS Operating systems & software |
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-3992 Exploited |
Not yet scored | VMware ESXi Operating systems & software |
VMware ESXi OpenSLP Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-5847 Exploited |
Not yet scored | Unraid Unraid Applications & supply chain |
Unraid Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21972 Exploited |
Not yet scored | VMware vCenter Server Applications & supply chain |
VMware vCenter Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-4006 Exploited |
Not yet scored | VMware Multiple Products Identity & access |
Multiple VMware Products Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-11738 Exploited |
Not yet scored | WordPress Snap Creek Duplicator Plugin Applications & supply chain |
WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 3 Nov 2021 |
| CVE-2019-9978 Exploited |
Not yet scored | WordPress Social Warfare Plugin Applications & supply chain |
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2020-10189 Exploited |
Not yet scored | Zoho ManageEngine Identity & access |
Zoho ManageEngine Desktop Central File Upload Vulnerability | 3 Nov 2021 |
| CVE-2021-22005 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server File Upload Vulnerability | 3 Nov 2021 |
| CVE-2019-8394 Exploited |
Not yet scored | Zoho ManageEngine Operating systems & software |
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 3 Nov 2021 |
| CVE-2021-21985 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2020-25213 Exploited |
Not yet scored | WordPress File Manager Plugin Applications & supply chain |
WordPress File Manager Plugin Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27561 Exploited |
Not yet scored | Yealink Device Management Operating systems & software |
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2021-40539 Exploited |
Not yet scored | Zoho ManageEngine Applications & supply chain |
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-3952 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-29583 Exploited |
Not yet scored | Zyxel Multiple Products Network & security devices |
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2012-0158 Exploited |
Not yet scored | Microsoft MSCOMCTL.OCX Operating systems & software |
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-1215 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-36942 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2019-0797 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2018-8653 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.