Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1490new in the last 7 days
- 5added as actively exploited
- 112critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-23376 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 14 Feb 2023 |
| CVE-2023-0669 Exploited |
Not yet scored | Fortra GoAnywhere MFT Operating systems & software |
Fortra GoAnywhere MFT Remote Code Execution Vulnerability | 10 Feb 2023 |
| CVE-2022-24990 Exploited |
Not yet scored | TerraMaster TerraMaster OS Operating systems & software |
TerraMaster OS Remote Command Execution Vulnerability | 10 Feb 2023 |
| CVE-2015-2291 Exploited |
Not yet scored | Intel Ethernet Diagnostics Driver for Windows Hardware & firmware |
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability | 10 Feb 2023 |
| CVE-2022-21587 Exploited |
Not yet scored | Oracle E-Business Suite Applications & supply chain |
Oracle E-Business Suite Unspecified Vulnerability | 2 Feb 2023 |
| CVE-2023-22952 Exploited |
Not yet scored | SugarCRM Multiple Products Applications & supply chain |
Multiple SugarCRM Products Remote Code Execution Vulnerability | 2 Feb 2023 |
| CVE-2017-11357 Exploited |
Not yet scored | Telerik User Interface (UI) for ASP.NET AJAX Operating systems & software |
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability | 26 Jan 2023 |
| CVE-2022-47966 Exploited |
Not yet scored | Zoho ManageEngine Applications & supply chain |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 23 Jan 2023 |
| CVE-2022-44877 Exploited |
Not yet scored | CWP Control Web Panel Operating systems & software |
CWP Control Web Panel OS Command Injection Vulnerability | 17 Jan 2023 |
| CVE-2022-41080 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Privilege Escalation Vulnerability | 10 Jan 2023 |
| CVE-2023-21674 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | 10 Jan 2023 |
| CVE-2018-18809 Exploited |
Not yet scored | TIBCO JasperReports Applications & supply chain |
TIBCO JasperReports Library Directory Traversal Vulnerability | 29 Dec 2022 |
| CVE-2018-5430 Exploited |
Not yet scored | TIBCO JasperReports Applications & supply chain |
TIBCO JasperReports Server Information Disclosure Vulnerability | 29 Dec 2022 |
| CVE-2022-42856 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS Type Confusion Vulnerability | 14 Dec 2022 |
| CVE-2022-42475 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 13 Dec 2022 |
| CVE-2022-44698 Exploited |
Not yet scored | Microsoft Defender Operating systems & software |
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 13 Dec 2022 |
| CVE-2022-26500 Exploited |
Not yet scored | Veeam Backup & Replication Applications & supply chain |
Veeam Backup & Replication Remote Code Execution Vulnerability | 13 Dec 2022 |
| CVE-2022-26501 Exploited |
Not yet scored | Veeam Backup & Replication Applications & supply chain |
Veeam Backup & Replication Remote Code Execution Vulnerability | 13 Dec 2022 |
| CVE-2022-27518 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC) and Gateway Identity & access |
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 13 Dec 2022 |
| CVE-2022-4262 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 5 Dec 2022 |
| CVE-2022-4135 Exploited |
Not yet scored | Google Chromium GPU Operating systems & software |
Google Chromium GPU Heap Buffer Overflow Vulnerability | 28 Nov 2022 |
| CVE-2021-35587 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 28 Nov 2022 |
| CVE-2022-41049 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 14 Nov 2022 |
| CVE-2022-41073 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 8 Nov 2022 |
| CVE-2022-41128 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 8 Nov 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.