Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2023new in the last 7 days
- 4added as actively exploited
- 165critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2013-3896 Exploited |
Not yet scored | Microsoft Silverlight Operating systems & software |
Microsoft Silverlight Information Disclosure Vulnerability | 25 May 2022 |
| CVE-2013-3993 Exploited |
Not yet scored | IBM InfoSphere BigInsights Operating systems & software |
IBM InfoSphere BigInsights Invalid Input Vulnerability | 25 May 2022 |
| CVE-2013-2423 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Unspecified Vulnerability | 25 May 2022 |
| CVE-2013-0431 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Sandbox Bypass Vulnerability | 25 May 2022 |
| CVE-2013-0422 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Remote Code Execution Vulnerability | 25 May 2022 |
| CVE-2012-1710 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 25 May 2022 |
| CVE-2010-1428 Exploited |
Not yet scored | Red Hat JBoss Operating systems & software |
Red Hat JBoss Information Disclosure Vulnerability | 25 May 2022 |
| CVE-2010-0840 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Unspecified Vulnerability | 25 May 2022 |
| CVE-2014-4077 Exploited |
Not yet scored | Microsoft Input Method Editor (IME) Japanese Operating systems & software |
Microsoft IME Japanese Privilege Escalation Vulnerability | 25 May 2022 |
| CVE-2016-4655 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2016-4657 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Webkit Memory Corruption Vulnerability | 24 May 2022 |
| CVE-2017-0149 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 24 May 2022 |
| CVE-2017-0147 Exploited |
Not yet scored | Microsoft SMBv1 server Operating systems & software |
Microsoft Windows SMBv1 Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2017-0005 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2017-0210 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2017-0022 Exploited |
Not yet scored | Microsoft XML Core Services Operating systems & software |
Microsoft XML Core Services Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2016-3298 Exploited |
Not yet scored | Microsoft Internet Explorer Applications & supply chain |
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2016-6367 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | 24 May 2022 |
| CVE-2018-8611 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 24 May 2022 |
| CVE-2018-19953 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Cross-Site Scripting Vulnerability | 24 May 2022 |
| CVE-2018-19943 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Cross-Site Scripting Vulnerability | 24 May 2022 |
| CVE-2016-6366 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | 24 May 2022 |
| CVE-2018-19949 Exploited |
Not yet scored | QNAP Network Attached Storage (NAS) Operating systems & software |
QNAP NAS File Station Command Injection Vulnerability | 24 May 2022 |
| CVE-2016-4656 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Memory Corruption Vulnerability | 24 May 2022 |
| CVE-2017-8291 Exploited |
Not yet scored | Artifex Ghostscript Operating systems & software |
Artifex Ghostscript Type Confusion Vulnerability | 24 May 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.