Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2023new in the last 7 days
- 4added as actively exploited
- 165critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-22947 Exploited |
Not yet scored | VMware Spring Cloud Gateway Cloud & SaaS |
VMware Spring Cloud Gateway Code Injection Vulnerability | 16 May 2022 |
| CVE-2022-30525 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls OS Command Injection Vulnerability | 16 May 2022 |
| CVE-2022-1388 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Missing Authentication Vulnerability | 10 May 2022 |
| CVE-2021-1789 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Type Confusion Vulnerability | 4 May 2022 |
| CVE-2019-8506 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Type Confusion Vulnerability | 4 May 2022 |
| CVE-2014-0160 Exploited |
Not yet scored | OpenSSL OpenSSL Operating systems & software |
OpenSSL Information Disclosure Vulnerability | 4 May 2022 |
| CVE-2014-0322 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 4 May 2022 |
| CVE-2014-4113 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 4 May 2022 |
| CVE-2021-40450 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2022-21919 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2021-41357 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2022-29464 Exploited |
Not yet scored | WSO2 Multiple Products Operating systems & software |
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | 25 Apr 2022 |
| CVE-2022-0847 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2022-26904 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 25 Apr 2022 |
| CVE-2019-1003029 Exploited |
Not yet scored | Jenkins Script Security Plugin Applications & supply chain |
Jenkins Script Security Plugin Sandbox Bypass Vulnerability | 25 Apr 2022 |
| CVE-2019-3568 Exploited |
Not yet scored | Meta Platforms Operating systems & software |
WhatsApp VOIP Stack Buffer Overflow Vulnerability | 19 Apr 2022 |
| CVE-2018-6882 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 19 Apr 2022 |
| CVE-2022-22718 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 19 Apr 2022 |
| CVE-2019-3929 Exploited |
Not yet scored | Crestron Multiple Products Operating systems & software |
Crestron Multiple Products Command Injection Vulnerability | 15 Apr 2022 |
| CVE-2022-1364 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 15 Apr 2022 |
| CVE-2016-4523 Exploited |
Not yet scored | Trihedral VTScada (formerly VTS) OT, ICS & IoT |
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | 15 Apr 2022 |
| CVE-2018-7841 Exploited |
Not yet scored | Schneider Electric U.motion Builder OT, ICS & IoT |
Schneider Electric U.motion Builder SQL Injection Vulnerability | 15 Apr 2022 |
| CVE-2022-22960 Exploited |
Not yet scored | VMware Multiple Products Identity & access |
VMware Multiple Products Privilege Escalation Vulnerability | 15 Apr 2022 |
| CVE-2010-5330 Exploited |
Not yet scored | Ubiquiti AirOS Operating systems & software |
Ubiquiti AirOS Command Injection Vulnerability | 15 Apr 2022 |
| CVE-2007-3010 Exploited |
Not yet scored | Alcatel OmniPCX Enterprise Operating systems & software |
Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability | 15 Apr 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.