Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-0604 Exploited |
Not yet scored | Microsoft SharePoint Applications & supply chain |
Microsoft SharePoint Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-7961 Exploited |
Not yet scored | Liferay Liferay Portal Operating systems & software |
Liferay Portal Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2021-30633 Exploited |
Not yet scored | Google Chromium Indexed DB API Applications & supply chain |
Google Chromium Indexed DB API Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-40444 Exploited |
Not yet scored | Microsoft MSHTML Operating systems & software |
Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-36942 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2021-30860 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-16846 Exploited |
Not yet scored | SaltStack Salt Applications & supply chain |
SaltStack Salt Shell Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-26411 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-16009 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2018-4939 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2021-21017 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2017-16651 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail File Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2021-30807 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-1879 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Applications & supply chain |
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2021-30661 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-30666 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2018-2380 Exploited |
Not yet scored | SAP Customer Relationship Management (CRM) Operating systems & software |
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-30713 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2019-0797 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2010-5326 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-9563 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver XML External Entity (XXE) Vulnerability | 3 Nov 2021 |
| CVE-2020-27950 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Initialization Vulnerability | 3 Nov 2021 |
| CVE-2020-10221 Exploited |
Not yet scored | rConfig rConfig Applications & supply chain |
rConfig OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-6287 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 3 Nov 2021 |
| CVE-2020-6207 Exploited |
Not yet scored | SAP Solution Manager Operating systems & software |
SAP Solution Manager Missing Authentication for Critical Function Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.