Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1314new in the last 7 days
- 5added as actively exploited
- 88critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-16009 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2016-3643 Exploited |
Not yet scored | SolarWinds Virtualization Manager Operating systems & software |
SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-9082 Exploited |
Not yet scored | ThinkPHP ThinkPHP Operating systems & software |
ThinkPHP Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27102 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-18935 Exploited |
Not yet scored | Progress Telerik UI for ASP.NET AJAX Operating systems & software |
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2020-0069 Exploited |
Not yet scored | MediaTek Multiple Chipsets Hardware & firmware |
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2017-5638 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-4939 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2021-21017 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-27103 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2021-28550 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-27101 Exploited |
Not yet scored | Accellion FTA Applications & supply chain |
Accellion FTA SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2018-15961 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Unrestricted File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-29583 Exploited |
Not yet scored | Zyxel Multiple Products Network & security devices |
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2021-40539 Exploited |
Not yet scored | Zoho ManageEngine Applications & supply chain |
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-21985 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2021-21972 Exploited |
Not yet scored | VMware vCenter Server Applications & supply chain |
VMware vCenter Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-8394 Exploited |
Not yet scored | Zoho ManageEngine Operating systems & software |
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-25213 Exploited |
Not yet scored | WordPress File Manager Plugin Applications & supply chain |
WordPress File Manager Plugin Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0541 Exploited |
Not yet scored | Microsoft MSHTML Operating systems & software |
Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27561 Exploited |
Not yet scored | Yealink Device Management Operating systems & software |
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2019-9978 Exploited |
Not yet scored | WordPress Social Warfare Plugin Applications & supply chain |
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2020-11738 Exploited |
Not yet scored | WordPress Snap Creek Duplicator Plugin Applications & supply chain |
WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 3 Nov 2021 |
| CVE-2020-4006 Exploited |
Not yet scored | VMware Multiple Products Identity & access |
Multiple VMware Products Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-3952 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Information Disclosure Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.