Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2023new in the last 7 days
- 4added as actively exploited
- 165critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-21999 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2021-42237 Exploited |
Not yet scored | Sitecore XP Operating systems & software |
Sitecore XP Remote Command Execution Vulnerability | 25 Mar 2022 |
| CVE-2021-22941 Exploited |
Not yet scored | Citrix ShareFile Network & security devices |
Citrix ShareFile Improper Access Control Vulnerability | 25 Mar 2022 |
| CVE-2020-9377 Exploited |
Not yet scored | D-Link DIR-610 Devices Applications & supply chain |
D-Link DIR-610 Devices Remote Command Execution | 25 Mar 2022 |
| CVE-2020-9054 Exploited |
Not yet scored | Zyxel Multiple Network-Attached Storage (NAS) Devices Operating systems & software |
Zyxel Multiple NAS Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2020-7247 Exploited |
Not yet scored | OpenBSD OpenSMTPD Operating systems & software |
OpenSMTPD Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-5410 Exploited |
Not yet scored | VMware Tanzu Spring Cloud Configuration (Config) Server Cloud & SaaS |
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2020-25223 Exploited |
Not yet scored | Sophos SG UTM Operating systems & software |
Sophos SG UTM Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-2506 Exploited |
Not yet scored | QNAP Systems Helpdesk Operating systems & software |
QNAP Helpdesk Improper Access Control Vulnerability | 25 Mar 2022 |
| CVE-2020-2021 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Identity & access |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 25 Mar 2022 |
| CVE-2020-1956 Exploited |
Not yet scored | Apache Kylin Operating systems & software |
Apache Kylin OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2020-1631 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS Path Traversal Vulnerability | 25 Mar 2022 |
| CVE-2019-1003030 Exploited |
Not yet scored | Jenkins Matrix Project Plugin Applications & supply chain |
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2019-10068 Exploited |
Not yet scored | Kentico Xperience Operating systems & software |
Kentico Xperience Deserialization of Untrusted Data Vulnerability | 25 Mar 2022 |
| CVE-2014-0130 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2015-1427 Exploited |
Not yet scored | Elastic Elasticsearch Operating systems & software |
Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2013-5223 Exploited |
Not yet scored | D-Link DSL-2760U Network & security devices |
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 25 Mar 2022 |
| CVE-2016-4171 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-10174 Exploited |
Not yet scored | NETGEAR WNR2000v5 Router Network & security devices |
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2016-11021 Exploited |
Not yet scored | D-Link DCS-930L Devices Operating systems & software |
D-Link DCS-930L Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2016-0752 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2015-4068 Exploited |
Not yet scored | Arcserve Unified Data Protection (UDP) Operating systems & software |
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2015-3035 Exploited |
Not yet scored | TP-Link Multiple Archer Devices Operating systems & software |
TP-Link Multiple Archer Devices Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2015-1187 Exploited |
Not yet scored | D-Link and TRENDnet Multiple Devices Operating systems & software |
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2015-0666 Exploited |
Not yet scored | Cisco Prime Data Center Network Manager (DCNM) Network & security devices |
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.