Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1489new in the last 7 days
- 4added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-7192 Exploited |
Not yet scored | QNAP Photo Station Operating systems & software |
QNAP Photo Station Improper Access Control Vulnerability | 8 Jun 2022 |
| CVE-2017-5030 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Memory Corruption Vulnerability | 8 Jun 2022 |
| CVE-2012-5054 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Integer Overflow Vulnerability | 8 Jun 2022 |
| CVE-2012-4969 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 8 Jun 2022 |
| CVE-2012-1889 Exploited |
Not yet scored | Microsoft XML Core Services Operating systems & software |
Microsoft XML Core Services Memory Corruption Vulnerability | 8 Jun 2022 |
| CVE-2012-0767 Exploited |
Not yet scored | Adobe Flash Player Applications & supply chain |
Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | 8 Jun 2022 |
| CVE-2016-5198 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Memory Vulnerability | 8 Jun 2022 |
| CVE-2019-5825 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Write Vulnerability | 8 Jun 2022 |
| CVE-2018-17463 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Remote Code Execution Vulnerability | 8 Jun 2022 |
| CVE-2017-6862 Exploited |
Not yet scored | NETGEAR Multiple Devices Operating systems & software |
NETGEAR Multiple Devices Buffer Overflow Vulnerability | 8 Jun 2022 |
| CVE-2017-5070 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 8 Jun 2022 |
| CVE-2016-1646 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Read Vulnerability | 8 Jun 2022 |
| CVE-2013-1331 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Buffer Overflow Vulnerability | 8 Jun 2022 |
| CVE-2018-17480 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Write Vulnerability | 8 Jun 2022 |
| CVE-2008-0655 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Unspecified Vulnerability | 8 Jun 2022 |
| CVE-2022-26134 Exploited |
Not yet scored | Atlassian Confluence Server/Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | 2 Jun 2022 |
| CVE-2014-4077 Exploited |
Not yet scored | Microsoft Input Method Editor (IME) Japanese Operating systems & software |
Microsoft IME Japanese Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2013-7331 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Information Disclosure Vulnerability | 25 May 2022 |
| CVE-2013-3993 Exploited |
Not yet scored | IBM InfoSphere BigInsights Operating systems & software |
IBM InfoSphere BigInsights Invalid Input Vulnerability | 25 May 2022 |
| CVE-2013-3896 Exploited |
Not yet scored | Microsoft Silverlight Operating systems & software |
Microsoft Silverlight Information Disclosure Vulnerability | 25 May 2022 |
| CVE-2010-0840 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Unspecified Vulnerability | 25 May 2022 |
| CVE-2010-1428 Exploited |
Not yet scored | Red Hat JBoss Operating systems & software |
Red Hat JBoss Information Disclosure Vulnerability | 25 May 2022 |
| CVE-2012-1710 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 25 May 2022 |
| CVE-2014-3153 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2013-0074 Exploited |
Not yet scored | Microsoft Silverlight Operating systems & software |
Microsoft Silverlight Double Dereference Vulnerability | 25 May 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.