Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1314new in the last 7 days
- 5added as actively exploited
- 88critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-22005 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-10189 Exploited |
Not yet scored | Zoho ManageEngine Identity & access |
Zoho ManageEngine Desktop Central File Upload Vulnerability | 3 Nov 2021 |
| CVE-2021-36742 Exploited |
Not yet scored | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2020-17496 Exploited |
Not yet scored | vBulletin vBulletin Cloud & SaaS |
vBulletin PHP Module Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-5847 Exploited |
Not yet scored | Unraid Unraid Applications & supply chain |
Unraid Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-20085 Exploited |
Not yet scored | TVT NVMS-1000 Operating systems & software |
TVT NVMS-1000 Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-36741 Exploited |
Not yet scored | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2020-8599 Exploited |
Not yet scored | Trend Micro Apex One and OfficeScan Operating systems & software |
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-8468 Exploited |
Not yet scored | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents Operating systems & software |
Trend Micro Multiple Products Content Validation Escape Vulnerability | 3 Nov 2021 |
| CVE-2020-8467 Exploited |
Not yet scored | Trend Micro Apex One and OfficeScan Operating systems & software |
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-18187 Exploited |
Not yet scored | Trend Micro OfficeScan Operating systems & software |
Trend Micro OfficeScan Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2019-16759 Exploited |
Not yet scored | vBulletin vBulletin Applications & supply chain |
vBulletin PHP Module Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-3992 Exploited |
Not yet scored | VMware ESXi Operating systems & software |
VMware ESXi OpenSLP Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-5544 Exploited |
Not yet scored | VMware VMware ESXi and Horizon DaaS Operating systems & software |
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-5849 Exploited |
Not yet scored | Unraid Unraid Operating systems & software |
Unraid Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2018-14558 Exploited |
Not yet scored | Tenda AC7, AC9, and AC10 Routers Network & security devices |
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-10987 Exploited |
Not yet scored | Tenda AC1900 Router AC15 Model Network & security devices |
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-31755 Exploited |
Not yet scored | Tenda AC11 Router Network & security devices |
Tenda AC11 Router Stack Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2017-9248 Exploited |
Not yet scored | Progress ASP.NET AJAX and Sitefinity Applications & supply chain |
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | 3 Nov 2021 |
| CVE-2019-18988 Exploited |
Not yet scored | TeamViewer Desktop Operating systems & software |
TeamViewer Desktop Bypass Remote Login Vulnerability | 3 Nov 2021 |
| CVE-2017-6327 Exploited |
Not yet scored | Symantec Symantec Messaging Gateway Network & security devices |
Symantec Messaging Gateway Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-10181 Exploited |
Not yet scored | Sumavision Enhanced Multimedia Router (EMR) Network & security devices |
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 3 Nov 2021 |
| CVE-2021-20016 Exploited |
Not yet scored | SonicWall SSLVPN SMA100 Network & security devices |
SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-20023 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-20022 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Unrestricted Upload of File Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.