Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 832new in the last 7 days
- 6added as actively exploited
- 59critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-25395 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Race Condition Vulnerability | 29 Jun 2023 |
| CVE-2019-20500 Exploited |
Not yet scored | D-Link DWL-2600AP Access Point Operating systems & software |
D-Link DWL-2600AP Access Point Command Injection Vulnerability | 29 Jun 2023 |
| CVE-2021-25487 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Out-of-Bounds Read Vulnerability | 29 Jun 2023 |
| CVE-2019-17621 Exploited |
Not yet scored | D-Link DIR-859 Router Network & security devices |
D-Link DIR-859 Router Command Execution Vulnerability | 29 Jun 2023 |
| CVE-2021-25489 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Input Validation Vulnerability | 29 Jun 2023 |
| CVE-2021-25371 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Unspecified Vulnerability | 29 Jun 2023 |
| CVE-2021-25394 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Race Condition Vulnerability | 29 Jun 2023 |
| CVE-2021-25372 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Improper Boundary Check Vulnerability | 29 Jun 2023 |
| CVE-2023-32439 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Type Confusion Vulnerability | 23 Jun 2023 |
| CVE-2023-27992 Exploited |
Not yet scored | Zyxel Multiple Network-Attached Storage (NAS) Devices Operating systems & software |
Zyxel Multiple NAS Devices Command Injection Vulnerability | 23 Jun 2023 |
| CVE-2023-32434 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow Vulnerability | 23 Jun 2023 |
| CVE-2023-32435 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 23 Jun 2023 |
| CVE-2023-20867 Exploited |
Not yet scored | VMware Tools Operating systems & software |
VMware Tools Authentication Bypass Vulnerability | 23 Jun 2023 |
| CVE-2020-35730 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 22 Jun 2023 |
| CVE-2016-0165 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 22 Jun 2023 |
| CVE-2020-12641 Exploited |
Not yet scored | Roundcube Roundcube Webmail Operating systems & software |
Roundcube Webmail Remote Code Execution Vulnerability | 22 Jun 2023 |
| CVE-2023-20887 Exploited |
Not yet scored | VMware Aria Operations for Networks Operating systems & software |
Vmware Aria Operations for Networks Command Injection Vulnerability | 22 Jun 2023 |
| CVE-2016-9079 Exploited |
Not yet scored | Mozilla Firefox, Firefox ESR, and Thunderbird Operating systems & software |
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | 22 Jun 2023 |
| CVE-2021-44026 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail SQL Injection Vulnerability | 22 Jun 2023 |
| CVE-2023-27997 Exploited |
Not yet scored | Fortinet FortiOS and FortiProxy SSL-VPN Network & security devices |
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 13 Jun 2023 |
| CVE-2023-3079 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 7 Jun 2023 |
| CVE-2023-33010 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-33009 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-34362 Exploited |
Not yet scored | Progress MOVEit Transfer Cloud & SaaS |
Progress MOVEit Transfer SQL Injection Vulnerability | 2 Jun 2023 |
| CVE-2023-28771 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls OS Command Injection Vulnerability | 31 May 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.