Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1314new in the last 7 days
- 5added as actively exploited
- 88critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-6448 Exploited |
Not yet scored | Unitronics Vision PLC and HMI OT, ICS & IoT |
Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 11 Dec 2023 |
| CVE-2023-41265 Exploited |
Not yet scored | Qlik Sense Operating systems & software |
Qlik Sense HTTP Tunneling Vulnerability | 7 Dec 2023 |
| CVE-2023-41266 Exploited |
Not yet scored | Qlik Sense Operating systems & software |
Qlik Sense Path Traversal Vulnerability | 7 Dec 2023 |
| CVE-2023-33107 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 5 Dec 2023 |
| CVE-2022-22071 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 5 Dec 2023 |
| CVE-2023-33106 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 5 Dec 2023 |
| CVE-2023-33063 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 5 Dec 2023 |
| CVE-2023-42916 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 4 Dec 2023 |
| CVE-2023-42917 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 4 Dec 2023 |
| CVE-2023-6345 Exploited |
Not yet scored | Google Chromium Skia Operating systems & software |
Google Skia Integer Overflow Vulnerability | 30 Nov 2023 |
| CVE-2023-49103 Exploited |
Not yet scored | ownCloud ownCloud graphapi Applications & supply chain |
ownCloud graphapi Information Disclosure Vulnerability | 30 Nov 2023 |
| CVE-2023-4911 Exploited |
Not yet scored | GNU GNU C Library Applications & supply chain |
GNU C Library Buffer Overflow Vulnerability | 21 Nov 2023 |
| CVE-2023-1671 Exploited |
Not yet scored | Sophos Web Appliance Operating systems & software |
Sophos Web Appliance Command Injection Vulnerability | 16 Nov 2023 |
| CVE-2023-36584 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 16 Nov 2023 |
| CVE-2020-2551 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 16 Nov 2023 |
| CVE-2023-36036 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 14 Nov 2023 |
| CVE-2023-36033 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 14 Nov 2023 |
| CVE-2023-36025 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 14 Nov 2023 |
| CVE-2023-36851 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-36844 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 13 Nov 2023 |
| CVE-2023-47246 Exploited |
Not yet scored | SysAid SysAid Server Operating systems & software |
SysAid Server Path Traversal Vulnerability | 13 Nov 2023 |
| CVE-2023-36846 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-36845 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 13 Nov 2023 |
| CVE-2023-36847 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-29552 Exploited |
Not yet scored | IETF Service Location Protocol (SLP) Operating systems & software |
Service Location Protocol (SLP) Denial-of-Service Vulnerability | 8 Nov 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.