Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-20085 Exploited |
Not yet scored | TVT NVMS-1000 Operating systems & software |
TVT NVMS-1000 Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-1497 Exploited |
Not yet scored | Cisco HyperFlex HX Network & security devices |
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-5847 Exploited |
Not yet scored | Unraid Unraid Applications & supply chain |
Unraid Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8468 Exploited |
Not yet scored | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents Operating systems & software |
Trend Micro Multiple Products Content Validation Escape Vulnerability | 3 Nov 2021 |
| CVE-2019-8394 Exploited |
Not yet scored | Zoho ManageEngine Operating systems & software |
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 3 Nov 2021 |
| CVE-2021-22005 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-25213 Exploited |
Not yet scored | WordPress File Manager Plugin Applications & supply chain |
WordPress File Manager Plugin Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21972 Exploited |
Not yet scored | VMware vCenter Server Applications & supply chain |
VMware vCenter Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-11738 Exploited |
Not yet scored | WordPress Snap Creek Duplicator Plugin Applications & supply chain |
WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 3 Nov 2021 |
| CVE-2021-40539 Exploited |
Not yet scored | Zoho ManageEngine Applications & supply chain |
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-10189 Exploited |
Not yet scored | Zoho ManageEngine Identity & access |
Zoho ManageEngine Desktop Central File Upload Vulnerability | 3 Nov 2021 |
| CVE-2019-9978 Exploited |
Not yet scored | WordPress Social Warfare Plugin Applications & supply chain |
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2020-29583 Exploited |
Not yet scored | Zyxel Multiple Products Network & security devices |
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2021-21985 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2020-4006 Exploited |
Not yet scored | VMware Multiple Products Identity & access |
Multiple VMware Products Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-27561 Exploited |
Not yet scored | Yealink Device Management Operating systems & software |
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2021-1870 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-3452 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-1498 Exploited |
Not yet scored | Cisco HyperFlex HX Network & security devices |
Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2018-15961 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Unrestricted File Upload Vulnerability | 3 Nov 2021 |
| CVE-2019-11580 Exploited |
Not yet scored | Atlassian Crowd and Crowd Data Center Applications & supply chain |
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30663 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-0674 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2018-0171 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-3118 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.