Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2017-11774 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Outlook Security Feature Bypass Vulnerability | 3 Nov 2021 |
| CVE-2019-1653 Exploited |
Not yet scored | Cisco Small Business RV320 and RV325 Routers Network & security devices |
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2019-13608 Exploited |
Not yet scored | Citrix StoreFront Server Network & security devices |
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 3 Nov 2021 |
| CVE-2020-8193 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-21166 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Race Condition Vulnerability | 3 Nov 2021 |
| CVE-2020-0069 Exploited |
Not yet scored | MediaTek Multiple Chipsets Hardware & firmware |
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2020-16017 Exploited |
Not yet scored | Google Chrome Operating systems & software |
Google Chrome Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-0968 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-26858 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0541 Exploited |
Not yet scored | Microsoft MSHTML Operating systems & software |
Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27065 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-1054 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-34448 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-8655 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Operating systems & software |
EyesOfNetwork Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2020-5902 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-3161 Exploited |
Not yet scored | Cisco Cisco IP Phones Network & security devices |
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2019-11510 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 3 Nov 2021 |
| CVE-2020-12812 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 3 Nov 2021 |
| CVE-2021-22986 Exploited |
Not yet scored | F5 BIG-IP and BIG-IQ Centralized Management Identity & access |
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-15999 Exploited |
Not yet scored | Google Chrome FreeType Applications & supply chain |
Google Chrome FreeType Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-37976 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2018-13379 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-16010 Exploited |
Not yet scored | Google Chrome for Android UI Operating systems & software |
Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-1147 Exploited |
Not yet scored | Microsoft .NET Framework, SharePoint, Visual Studio Operating systems & software |
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-27930 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.