Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2013-4810 Exploited |
Not yet scored | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management Identity & access |
HP Multiple Products Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-1555 Exploited |
Not yet scored | NETGEAR Wireless Access Point (WAP) Devices Operating systems & software |
NETGEAR Multiple WAP Devices Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2010-4345 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2020-5135 Exploited |
Not yet scored | SonicWall SonicOS Network & security devices |
SonicWall SonicOS Buffer Overflow Vulnerability | 15 Mar 2022 |
| CVE-2019-1129 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1069 Exploited |
Not yet scored | Microsoft Task Scheduler Operating systems & software |
Microsoft Task Scheduler Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-0543 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2018-8120 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2017-0101 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Transaction Manager Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1064 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2016-3309 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-0841 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1322 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1315 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2015-2546 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Memory Corruption Vulnerability | 15 Mar 2022 |
| CVE-2019-1253 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1132 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1405 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2022-26486 Exploited |
Not yet scored | Mozilla Firefox Operating systems & software |
Mozilla Firefox Use-After-Free Vulnerability | 7 Mar 2022 |
| CVE-2020-8218 Exploited |
Not yet scored | Pulse Secure Pulse Connect Secure Operating systems & software |
Pulse Connect Secure Code Injection Vulnerability | 7 Mar 2022 |
| CVE-2019-11581 Exploited |
Not yet scored | Atlassian Jira Server and Data Center Operating systems & software |
Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | 7 Mar 2022 |
| CVE-2017-6077 Exploited |
Not yet scored | NETGEAR Wireless Router DGN2200 Network & security devices |
NETGEAR DGN2200 Remote Code Execution Vulnerability | 7 Mar 2022 |
| CVE-2022-26485 Exploited |
Not yet scored | Mozilla Firefox Operating systems & software |
Mozilla Firefox Use-After-Free Vulnerability | 7 Mar 2022 |
| CVE-2016-6277 Exploited |
Not yet scored | NETGEAR Multiple Routers Network & security devices |
NETGEAR Multiple Routers Remote Code Execution Vulnerability | 7 Mar 2022 |
| CVE-2013-0631 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Information Disclosure Vulnerability | 7 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.