Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2945new in the last 7 days
- 3added as actively exploited
- 219critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-27932 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2020-9818 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Operating systems & software |
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2020-9819 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Operating systems & software |
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2016-3976 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2019-16256 Exploited |
Not yet scored | SIMalliance Toolbox Browser Operating systems & software |
SIMalliance Toolbox Browser Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-10148 Exploited |
Not yet scored | SolarWinds Orion Applications & supply chain |
SolarWinds Orion Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-35211 Exploited |
Not yet scored | SolarWinds Serv-U Operating systems & software |
SolarWinds Serv-U Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-1905 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-11652 Exploited |
Not yet scored | SaltStack Salt Operating systems & software |
SaltStack Salt Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-11651 Exploited |
Not yet scored | SaltStack Salt Operating systems & software |
SaltStack Salt Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-30761 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-31755 Exploited |
Not yet scored | Tenda AC11 Router Network & security devices |
Tenda AC11 Router Stack Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30869 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2020-9859 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27562 Exploited |
Not yet scored | Arm Trusted Firmware Hardware & firmware |
Arm Trusted Firmware Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2021-20016 Exploited |
Not yet scored | SonicWall SSLVPN SMA100 Network & security devices |
SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2018-8653 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2019-7481 Exploited |
Not yet scored | SonicWall SMA100 Network & security devices |
SonicWall SMA100 SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-20023 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-28664 Exploited |
Not yet scored | Arm Mali Graphics Processing Unit (GPU) Hardware & firmware |
Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-10181 Exploited |
Not yet scored | Sumavision Enhanced Multimedia Router (EMR) Network & security devices |
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 3 Nov 2021 |
| CVE-2017-6327 Exploited |
Not yet scored | Symantec Symantec Messaging Gateway Network & security devices |
Symantec Messaging Gateway Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-18988 Exploited |
Not yet scored | TeamViewer Desktop Operating systems & software |
TeamViewer Desktop Bypass Remote Login Vulnerability | 3 Nov 2021 |
| CVE-2017-9248 Exploited |
Not yet scored | Progress ASP.NET AJAX and Sitefinity Applications & supply chain |
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | 3 Nov 2021 |
| CVE-2020-10987 Exploited |
Not yet scored | Tenda AC1900 Router AC15 Model Network & security devices |
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.