Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-17144 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30116 Exploited |
Not yet scored | Kaseya Virtual System/Server Administrator (VSA) Operating systems & software |
Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2021-38003 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-0986 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-16013 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Incorrect Implementation Vulnerabililty | 3 Nov 2021 |
| CVE-2019-1367 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2019-1214 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-31979 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-15949 Exploited |
Not yet scored | Nagios Nagios XI Applications & supply chain |
Nagios XI Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0863 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-36955 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2016-3718 Exploited |
Not yet scored | ImageMagick ImageMagick Operating systems & software |
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2019-18187 Exploited |
Not yet scored | Trend Micro OfficeScan Operating systems & software |
Trend Micro OfficeScan Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-38648 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-0808 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-6819 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-6820 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-17026 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox And Thunderbird Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-21193 Exploited |
Not yet scored | Google Chromium Blink Operating systems & software |
Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-26919 Exploited |
Not yet scored | NETGEAR JGS516PE Devices Operating systems & software |
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | 3 Nov 2021 |
| CVE-2019-0859 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-35464 Exploited |
Not yet scored | ForgeRock Access Management (AM) Operating systems & software |
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-20022 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Unrestricted Upload of File Vulnerability | 3 Nov 2021 |
| CVE-2019-4716 Exploited |
Not yet scored | IBM Planning Analytics Operating systems & software |
IBM Planning Analytics Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-22900 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.