Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1782new in the last 7 days
- 4added as actively exploited
- 139critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2018-6882 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 19 Apr 2022 |
| CVE-2022-22718 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 19 Apr 2022 |
| CVE-2010-5330 Exploited |
Not yet scored | Ubiquiti AirOS Operating systems & software |
Ubiquiti AirOS Command Injection Vulnerability | 15 Apr 2022 |
| CVE-2007-3010 Exploited |
Not yet scored | Alcatel OmniPCX Enterprise Operating systems & software |
Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability | 15 Apr 2022 |
| CVE-2019-3929 Exploited |
Not yet scored | Crestron Multiple Products Operating systems & software |
Crestron Multiple Products Command Injection Vulnerability | 15 Apr 2022 |
| CVE-2019-16057 Exploited |
Not yet scored | D-Link DNS-320 Storage Device Network & security devices |
D-Link DNS-320 Remote Code Execution Vulnerability | 15 Apr 2022 |
| CVE-2016-4523 Exploited |
Not yet scored | Trihedral VTScada (formerly VTS) OT, ICS & IoT |
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | 15 Apr 2022 |
| CVE-2018-7841 Exploited |
Not yet scored | Schneider Electric U.motion Builder OT, ICS & IoT |
Schneider Electric U.motion Builder SQL Injection Vulnerability | 15 Apr 2022 |
| CVE-2022-1364 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 15 Apr 2022 |
| CVE-2014-0780 Exploited |
Not yet scored | InduSoft Web Studio Operating systems & software |
InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | 15 Apr 2022 |
| CVE-2022-22960 Exploited |
Not yet scored | VMware Multiple Products Identity & access |
VMware Multiple Products Privilege Escalation Vulnerability | 15 Apr 2022 |
| CVE-2022-22954 Exploited |
Not yet scored | VMware Workspace ONE Access and Identity Manager Identity & access |
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | 14 Apr 2022 |
| CVE-2015-5122 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 13 Apr 2022 |
| CVE-2015-0311 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 13 Apr 2022 |
| CVE-2015-2502 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 13 Apr 2022 |
| CVE-2014-9163 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | 13 Apr 2022 |
| CVE-2022-24521 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | 13 Apr 2022 |
| CVE-2018-7602 Exploited |
Not yet scored | Drupal Core Operating systems & software |
Drupal Core Remote Code Execution Vulnerability | 13 Apr 2022 |
| CVE-2018-20753 Exploited |
Not yet scored | Kaseya Virtual System/Server Administrator (VSA) Operating systems & software |
Kaseya VSA Remote Code Execution Vulnerability | 13 Apr 2022 |
| CVE-2015-5123 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 13 Apr 2022 |
| CVE-2015-3113 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | 13 Apr 2022 |
| CVE-2015-0313 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 13 Apr 2022 |
| CVE-2021-22600 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 11 Apr 2022 |
| CVE-2022-23176 Exploited |
Not yet scored | WatchGuard Firebox and XTM Operating systems & software |
WatchGuard Firebox and XTM Privilege Escalation Vulnerability | 11 Apr 2022 |
| CVE-2021-39793 Exploited |
Not yet scored | Google Pixel Operating systems & software |
Google Pixel Out-of-Bounds Write Vulnerability | 11 Apr 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.