Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2441new in the last 7 days
- 2added as actively exploited
- 180critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-3236 Exploited |
Not yet scored | Sophos Firewall Network & security devices |
Sophos Firewall Code Injection Vulnerability | 23 Sep 2022 |
| CVE-2022-35405 Exploited |
Not yet scored | Zoho ManageEngine Identity & access |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 22 Sep 2022 |
| CVE-2013-2094 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Privilege Escalation Vulnerability | 15 Sep 2022 |
| CVE-2010-2568 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Remote Code Execution Vulnerability | 15 Sep 2022 |
| CVE-2013-2596 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Integer Overflow Vulnerability | 15 Sep 2022 |
| CVE-2013-2597 Exploited |
Not yet scored | Code Aurora ACDB Audio Driver Hardware & firmware |
Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | 15 Sep 2022 |
| CVE-2013-6282 Exploited |
Not yet scored | Linux Kernel Hardware & firmware |
Linux Kernel Improper Input Validation Vulnerability | 15 Sep 2022 |
| CVE-2022-40139 Exploited |
Not yet scored | Trend Micro Apex One and Apex One as a Service Operating systems & software |
Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | 15 Sep 2022 |
| CVE-2022-32917 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | 14 Sep 2022 |
| CVE-2022-37969 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 14 Sep 2022 |
| CVE-2022-26258 Exploited |
Not yet scored | D-Link DIR-820L Operating systems & software |
D-Link DIR-820L Remote Code Execution Vulnerability | 8 Sep 2022 |
| CVE-2022-3075 Exploited |
Not yet scored | Google Chromium Mojo Operating systems & software |
Google Chromium Mojo Insufficient Data Validation Vulnerability | 8 Sep 2022 |
| CVE-2018-2628 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 8 Sep 2022 |
| CVE-2022-27593 Exploited |
Not yet scored | QNAP Photo Station Operating systems & software |
QNAP Photo Station Externally Controlled Reference Vulnerability | 8 Sep 2022 |
| CVE-2018-6530 Exploited |
Not yet scored | D-Link Multiple Routers Network & security devices |
D-Link Multiple Routers OS Command Injection Vulnerability | 8 Sep 2022 |
| CVE-2020-9934 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Input Validation Vulnerability | 8 Sep 2022 |
| CVE-2017-5521 Exploited |
Not yet scored | NETGEAR Multiple Devices Operating systems & software |
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | 8 Sep 2022 |
| CVE-2011-4723 Exploited |
Not yet scored | D-Link DIR-300 Router Network & security devices |
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 8 Sep 2022 |
| CVE-2011-1823 Exploited |
Not yet scored | Android Android OS Operating systems & software |
Android OS Privilege Escalation Vulnerability | 8 Sep 2022 |
| CVE-2018-13374 Exploited |
Not yet scored | Fortinet FortiOS and FortiADC Network & security devices |
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 8 Sep 2022 |
| CVE-2018-7445 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | 8 Sep 2022 |
| CVE-2022-22963 Exploited |
Not yet scored | VMware Tanzu Spring Cloud Cloud & SaaS |
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 25 Aug 2022 |
| CVE-2021-38406 Exploited |
Not yet scored | Delta Electronics DOPSoft 2 Operating systems & software |
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 25 Aug 2022 |
| CVE-2020-28949 Exploited |
Not yet scored | PEAR Archive_Tar Applications & supply chain |
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 25 Aug 2022 |
| CVE-2022-2294 Exploited |
Not yet scored | WebRTC WebRTC Applications & supply chain |
WebRTC Heap Buffer Overflow Vulnerability | 25 Aug 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.