Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2021new in the last 7 days
- 2added as actively exploited
- 165critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2018-0147 Exploited |
Not yet scored | Cisco Secure Access Control System (ACS) Network & security devices |
Cisco Secure Access Control System Java Deserialization Vulnerability | 25 Mar 2022 |
| CVE-2018-1273 Exploited |
Not yet scored | VMware Tanzu Spring Data Commons Operating systems & software |
VMware Tanzu Spring Data Commons Property Binder Vulnerability | 25 Mar 2022 |
| CVE-2018-11138 Exploited |
Not yet scored | Quest KACE System Management Appliance Applications & supply chain |
Quest KACE System Management Appliance Remote Command Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-6334 Exploited |
Not yet scored | NETGEAR DGN2200 Devices Hardware & firmware |
NETGEAR DGN2200 Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2017-3881 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-12617 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-12615 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat on Windows Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2019-0903 Exploited |
Not yet scored | Microsoft Graphics Device Interface (GDI) Operating systems & software |
Microsoft GDI Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2018-6961 Exploited |
Not yet scored | VMware SD-WAN Edge Operating systems & software |
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2017-0146 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SMB Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2018-8373 Exploited |
Not yet scored | Microsoft Internet Explorer Scripting Engine Operating systems & software |
Microsoft Scripting Engine Memory Corruption Vulnerability | 25 Mar 2022 |
| CVE-2018-8414 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Shell Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2018-0125 Exploited |
Not yet scored | Cisco VPN Routers Network & security devices |
Cisco VPN Routers Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2013-5223 Exploited |
Not yet scored | D-Link DSL-2760U Network & security devices |
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 25 Mar 2022 |
| CVE-2015-1187 Exploited |
Not yet scored | D-Link and TRENDnet Multiple Devices Operating systems & software |
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-4171 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-11021 Exploited |
Not yet scored | D-Link DCS-930L Devices Operating systems & software |
D-Link DCS-930L Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2016-0752 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2010-4345 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2019-10068 Exploited |
Not yet scored | Kentico Xperience Operating systems & software |
Kentico Xperience Deserialization of Untrusted Data Vulnerability | 25 Mar 2022 |
| CVE-2019-1003030 Exploited |
Not yet scored | Jenkins Matrix Project Plugin Applications & supply chain |
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2013-4810 Exploited |
Not yet scored | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management Identity & access |
HP Multiple Products Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-6316 Exploited |
Not yet scored | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server Cloud & SaaS |
Citrix Multiple Products Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-7892 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 25 Mar 2022 |
| CVE-2016-1555 Exploited |
Not yet scored | NETGEAR Wireless Access Point (WAP) Devices Operating systems & software |
NETGEAR Multiple WAP Devices Command Injection Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.