Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2023new in the last 7 days
- 4added as actively exploited
- 165critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-0543 Exploited |
Not yet scored | Redis Debian-specific Redis Servers Operating systems & software |
Debian-specific Redis Server Lua Sandbox Escape Vulnerability | 28 Mar 2022 |
| CVE-2021-34486 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Event Tracing Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2021-26085 Exploited |
Not yet scored | Atlassian Confluence Server Operating systems & software |
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | 28 Mar 2022 |
| CVE-2021-20028 Exploited |
Not yet scored | SonicWall Secure Remote Access (SRA) Network & security devices |
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | 28 Mar 2022 |
| CVE-2019-7483 Exploited |
Not yet scored | SonicWall SMA100 Network & security devices |
SonicWall SMA100 Directory Traversal Vulnerability | 28 Mar 2022 |
| CVE-2018-8406 Exploited |
Not yet scored | Microsoft DirectX Graphics Kernel (DXGKRNL) Operating systems & software |
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2018-8405 Exploited |
Not yet scored | Microsoft DirectX Graphics Kernel (DXGKRNL) Operating systems & software |
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2017-0213 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2017-0059 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Information Disclosure Vulnerability | 28 Mar 2022 |
| CVE-2017-0037 Exploited |
Not yet scored | Microsoft Edge and Internet Explorer Operating systems & software |
Microsoft Edge and Internet Explorer Type Confusion Vulnerability | 28 Mar 2022 |
| CVE-2018-8440 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2016-7200 Exploited |
Not yet scored | Microsoft Edge Operating systems & software |
Microsoft Edge Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2016-0151 Exploited |
Not yet scored | Microsoft Client-Server Run-time Subsystem (CSRSS) Operating systems & software |
Microsoft Windows CSRSS Security Feature Bypass Vulnerability | 28 Mar 2022 |
| CVE-2013-2551 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Use-After-Free Vulnerability | 28 Mar 2022 |
| CVE-2016-0040 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2015-2419 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2015-2426 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2009-1151 Exploited |
Not yet scored | phpMyAdmin phpMyAdmin Applications & supply chain |
phpMyAdmin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-1555 Exploited |
Not yet scored | NETGEAR Wireless Access Point (WAP) Devices Operating systems & software |
NETGEAR Multiple WAP Devices Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2019-11043 Exploited |
Not yet scored | PHP FastCGI Process Manager (FPM) Applications & supply chain |
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2022-26318 Exploited |
Not yet scored | WatchGuard Firebox and XTM Appliances Operating systems & software |
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | 25 Mar 2022 |
| CVE-2019-15107 Exploited |
Not yet scored | Webmin Webmin Operating systems & software |
Webmin Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2019-12991 Exploited |
Not yet scored | Citrix SD-WAN and NetScaler Network & security devices |
Citrix SD-WAN and NetScaler Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2019-12989 Exploited |
Not yet scored | Citrix SD-WAN and NetScaler Network & security devices |
Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 25 Mar 2022 |
| CVE-2022-26143 Exploited |
Not yet scored | Mitel MiCollab, MiVoice Business Express Operating systems & software |
MiCollab, MiVoice Business Express Access Control Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.