Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1314new in the last 7 days
- 5added as actively exploited
- 88critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-12271 Exploited |
Not yet scored | Sophos SFOS Identity & access |
Sophos SFOS SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-12812 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 3 Nov 2021 |
| CVE-2019-5591 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Default Configuration Vulnerability | 3 Nov 2021 |
| CVE-2020-5902 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8657 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Applications & supply chain |
EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2021-37976 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2021-21166 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Race Condition Vulnerability | 3 Nov 2021 |
| CVE-2020-29557 Exploited |
Not yet scored | D-Link DIR-825 R1 Devices Operating systems & software |
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2019-11634 Exploited |
Not yet scored | Citrix Workspace Application and Receiver for Windows Network & security devices |
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-19781 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8196 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-8195 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-8193 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 3 Nov 2021 |
| CVE-2019-13608 Exploited |
Not yet scored | Citrix StoreFront Server Network & security devices |
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 3 Nov 2021 |
| CVE-2018-0296 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2021-22900 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 3 Nov 2021 |
| CVE-2019-1653 Exploited |
Not yet scored | Cisco Small Business RV320 and RV325 Routers Network & security devices |
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-3161 Exploited |
Not yet scored | Cisco Cisco IP Phones Network & security devices |
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2020-8515 Exploited |
Not yet scored | DrayTek Multiple Vigor Routers Network & security devices |
Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 3 Nov 2021 |
| CVE-2019-15752 Exploited |
Not yet scored | Docker Desktop Community Edition Cloud & SaaS |
Docker Desktop Community Edition Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2017-9822 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-18325 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2018-15811 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2020-25506 Exploited |
Not yet scored | D-Link DNS-320 Device Network & security devices |
D-Link DNS-320 Device Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2018-0171 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.