Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2018-11776 Exploited |
Not yet scored | Apache Struts Applications & supply chain |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8657 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Applications & supply chain |
EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2018-6789 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2019-5591 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Default Configuration Vulnerability | 3 Nov 2021 |
| CVE-2020-14883 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-14882 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-0601 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows CryptoAPI Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2020-8644 Exploited |
Not yet scored | PlaySMS PlaySMS Operating systems & software |
PlaySMS Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2015-1641 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-23874 Exploited |
Not yet scored | McAfee McAfee Total Protection (MTP) Operating systems & software |
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2021-42013 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-8243 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30632 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2019-9082 Exploited |
Not yet scored | ThinkPHP ThinkPHP Operating systems & software |
ThinkPHP Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-22893 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-0041 Exploited |
Not yet scored | Android Android Kernel Operating systems & software |
Android Kernel Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2021-22894 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-28310 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-31956 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows NTFS Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-1906 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | 3 Nov 2021 |
| CVE-2015-4852 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2020-14871 Exploited |
Not yet scored | Oracle Solaris and Zettabyte File System (ZFS) Operating systems & software |
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-3950 Exploited |
Not yet scored | VMware Multiple Products Operating systems & software |
VMware Multiple Products Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2018-20062 Exploited |
Not yet scored | ThinkPHP noneCms Operating systems & software |
ThinkPHP "noneCms" Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-20021 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Improper Privilege Management Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.