Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-11539 Exploited |
Not yet scored | Ivanti Pulse Connect Secure and Pulse Policy Secure Network & security devices |
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-28550 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2017-9805 Exploited |
Not yet scored | Apache Struts Applications & supply chain |
Apache Struts Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2017-5638 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0211 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2017-8759 Exploited |
Not yet scored | Microsoft .NET Framework Operating systems & software |
Microsoft .NET Framework Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30858 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-6223 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Group Facetime Vulnerability | 3 Nov 2021 |
| CVE-2019-2215 Exploited |
Not yet scored | Android Android Kernel Operating systems & software |
Android Kernel Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2016-4437 Exploited |
Not yet scored | Apache Shiro Operating systems & software |
Apache Shiro Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-17558 Exploited |
Not yet scored | Apache Solr Operating systems & software |
Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-38645 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-41773 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-27085 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2012-0158 Exploited |
Not yet scored | Microsoft MSCOMCTL.OCX Operating systems & software |
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-1782 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Race Condition Vulnerability | 3 Nov 2021 |
| CVE-2021-30657 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2021-1871 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27103 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2018-0798 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2019-1215 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-5735 Exploited |
Not yet scored | Amcrest Cameras and Network Video Recorder (NVR) Operating systems & software |
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-14750 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-18935 Exploited |
Not yet scored | Progress Telerik UI for ASP.NET AJAX Operating systems & software |
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2020-12271 Exploited |
Not yet scored | Sophos SFOS Identity & access |
Sophos SFOS SQL Injection Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.