Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-9054 Exploited |
Not yet scored | Zyxel Multiple Network-Attached Storage (NAS) Devices Operating systems & software |
Zyxel Multiple NAS Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2020-9377 Exploited |
Not yet scored | D-Link DIR-610 Devices Applications & supply chain |
D-Link DIR-610 Devices Remote Command Execution | 25 Mar 2022 |
| CVE-2021-22941 Exploited |
Not yet scored | Citrix ShareFile Network & security devices |
Citrix ShareFile Improper Access Control Vulnerability | 25 Mar 2022 |
| CVE-2019-10068 Exploited |
Not yet scored | Kentico Xperience Operating systems & software |
Kentico Xperience Deserialization of Untrusted Data Vulnerability | 25 Mar 2022 |
| CVE-2021-42237 Exploited |
Not yet scored | Sitecore XP Operating systems & software |
Sitecore XP Remote Command Execution Vulnerability | 25 Mar 2022 |
| CVE-2019-0903 Exploited |
Not yet scored | Microsoft Graphics Device Interface (GDI) Operating systems & software |
Microsoft GDI Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2022-26318 Exploited |
Not yet scored | WatchGuard Firebox and XTM Appliances Operating systems & software |
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | 25 Mar 2022 |
| CVE-2019-11043 Exploited |
Not yet scored | PHP FastCGI Process Manager (FPM) Applications & supply chain |
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2019-1003030 Exploited |
Not yet scored | Jenkins Matrix Project Plugin Applications & supply chain |
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2018-8414 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Shell Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2018-14839 Exploited |
Not yet scored | LG N1A1 NAS Operating systems & software |
LG N1A1 NAS Remote Command Execution Vulnerability | 25 Mar 2022 |
| CVE-2018-1273 Exploited |
Not yet scored | VMware Tanzu Spring Data Commons Operating systems & software |
VMware Tanzu Spring Data Commons Property Binder Vulnerability | 25 Mar 2022 |
| CVE-2016-11021 Exploited |
Not yet scored | D-Link DCS-930L Devices Operating systems & software |
D-Link DCS-930L Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2018-11138 Exploited |
Not yet scored | Quest KACE System Management Appliance Applications & supply chain |
Quest KACE System Management Appliance Remote Command Execution Vulnerability | 25 Mar 2022 |
| CVE-2010-4344 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Heap-Based Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2010-3035 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 25 Mar 2022 |
| CVE-2009-2055 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 25 Mar 2022 |
| CVE-2009-1151 Exploited |
Not yet scored | phpMyAdmin phpMyAdmin Applications & supply chain |
phpMyAdmin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2009-0927 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2005-2773 Exploited |
Not yet scored | Hewlett Packard (HP) OpenView Network Node Manager Operating systems & software |
HP OpenView Network Node Manager Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2012-1823 Exploited |
Not yet scored | PHP PHP Applications & supply chain |
PHP-CGI Query String Parameter Vulnerability | 25 Mar 2022 |
| CVE-2017-12615 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat on Windows Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-12617 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2022-21999 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2022-26143 Exploited |
Not yet scored | Mitel MiCollab, MiVoice Business Express Operating systems & software |
MiCollab, MiVoice Business Express Access Control Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.