Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1490new in the last 7 days
- 5added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-32439 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Type Confusion Vulnerability | 23 Jun 2023 |
| CVE-2023-32435 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 23 Jun 2023 |
| CVE-2023-20887 Exploited |
Not yet scored | VMware Aria Operations for Networks Operating systems & software |
Vmware Aria Operations for Networks Command Injection Vulnerability | 22 Jun 2023 |
| CVE-2020-35730 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 22 Jun 2023 |
| CVE-2021-44026 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail SQL Injection Vulnerability | 22 Jun 2023 |
| CVE-2016-9079 Exploited |
Not yet scored | Mozilla Firefox, Firefox ESR, and Thunderbird Operating systems & software |
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | 22 Jun 2023 |
| CVE-2020-12641 Exploited |
Not yet scored | Roundcube Roundcube Webmail Operating systems & software |
Roundcube Webmail Remote Code Execution Vulnerability | 22 Jun 2023 |
| CVE-2016-0165 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 22 Jun 2023 |
| CVE-2023-27997 Exploited |
Not yet scored | Fortinet FortiOS and FortiProxy SSL-VPN Network & security devices |
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 13 Jun 2023 |
| CVE-2023-3079 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 7 Jun 2023 |
| CVE-2023-33009 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-33010 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-34362 Exploited |
Not yet scored | Progress MOVEit Transfer Cloud & SaaS |
Progress MOVEit Transfer SQL Injection Vulnerability | 2 Jun 2023 |
| CVE-2023-28771 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls OS Command Injection Vulnerability | 31 May 2023 |
| CVE-2023-2868 Exploited |
Not yet scored | Barracuda Networks Email Security Gateway (ESG) Appliance Network & security devices |
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | 26 May 2023 |
| CVE-2023-32409 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Sandbox Escape Vulnerability | 22 May 2023 |
| CVE-2023-32373 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Use-After-Free Vulnerability | 22 May 2023 |
| CVE-2023-28204 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 22 May 2023 |
| CVE-2004-1464 Exploited |
Not yet scored | Cisco IOS Network & security devices |
Cisco IOS Denial-of-Service Vulnerability | 19 May 2023 |
| CVE-2023-21492 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | 19 May 2023 |
| CVE-2016-6415 Exploited |
Not yet scored | Cisco IOS, IOS XR, and IOS XE Network & security devices |
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | 19 May 2023 |
| CVE-2016-3427 Exploited |
Not yet scored | Oracle Java SE and JRockit Applications & supply chain |
Oracle Java SE and JRockit Unspecified Vulnerability | 12 May 2023 |
| CVE-2015-5317 Exploited |
Not yet scored | Jenkins Jenkins User Interface (UI) Operating systems & software |
Jenkins User Interface (UI) Information Disclosure Vulnerability | 12 May 2023 |
| CVE-2014-0196 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Race Condition Vulnerability | 12 May 2023 |
| CVE-2010-3904 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Improper Input Validation Vulnerability | 12 May 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.