BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 13:54 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 40 of 71

  1. Added to KEVAug 11, 2022
    CVE-2022-370429.8 CRITICAL⚡ Known ExploitedSynacor Zimbra Collaboration Suite (ZCS)
    Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilitySynacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  2. Added to KEVAug 11, 2022
    CVE-2022-279257.2 HIGH⚡ Known ExploitedSynacor Zimbra Collaboration Suite (ZCS)
    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilitySynacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.
    ScoreSeverityVersionVector String
    7.2HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  3. Added to KEVAug 9, 2022
    CVE-2022-347137.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityA remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  4. Added to KEVAug 9, 2022
    CVE-2022-303339.8 CRITICAL⚡ Known ExploitedRARLAB UnRAR
    RARLAB UnRAR Directory Traversal VulnerabilityRARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:P/A:N
  5. Added to KEVAug 4, 2022
    CVE-2022-279249.8 CRITICAL⚡ Known ExploitedSynacor Zimbra Collaboration Suite (ZCS)
    Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilitySynacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:P/A:N
  6. Added to KEVJul 29, 2022
    CVE-2022-261389.8 CRITICAL⚡ Known ExploitedAtlassian Confluence
    Atlassian Questions For Confluence App Hard-coded Credentials VulnerabilityAtlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  7. Added to KEVJul 12, 2022
    CVE-2022-220477.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation VulnerabilityMicrosoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  8. Added to KEVJul 1, 2022
    CVE-2022-269258.1 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows LSA Spoofing VulnerabilityMicrosoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.
    ScoreSeverityVersionVector String
    8.1HIGH3.1CNACVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    5.9MEDIUM3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  9. Added to KEVJun 27, 2022
    CVE-2022-294999.8 CRITICAL⚡ Known ExploitedMitel MiVoice Connect
    Mitel MiVoice Connect Data Validation VulnerabilityThe Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  10. Added to KEVJun 27, 2022
    CVE-2021-309837.8 HIGH⚡ Known ExploitedApple iOS and iPadOS
    Apple iOS and iPadOS Buffer Overflow VulnerabilityApple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  11. Added to KEVJun 27, 2022
    CVE-2021-305336.5 MEDIUM⚡ Known ExploitedGoogle Chromium PopupBlocker
    Google Chromium PopupBlocker Security Bypass VulnerabilityGoogle Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  12. Added to KEVJun 27, 2022
    CVE-2021-40347.8 HIGH⚡ Known ExploitedRed Hat Polkit
    Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityThe Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  13. Added to KEVJun 27, 2022
    CVE-2020-99077.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Memory Corruption VulnerabilityApple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  14. Added to KEVJun 27, 2022
    CVE-2020-38377.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Memory Corruption VulnerabilityApple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  15. Added to KEVJun 27, 2022
    CVE-2019-86057.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Use-After-Free VulnerabilityA use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  16. Added to KEVJun 27, 2022
    CVE-2018-43447.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Memory Corruption VulnerabilityApple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  17. Added to KEVJun 14, 2022
    CVE-2022-301907.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityA remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  18. Added to KEVJun 9, 2022
    CVE-2021-381639.9 CRITICAL⚡ Known ExploitedSAP NetWeaver
    SAP NetWeaver Unrestricted File Upload VulnerabilitySAP NetWeaver contains a vulnerability that allows unrestricted file upload.
    ScoreSeverityVersionVector String
    9.9CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  19. Added to KEVJun 9, 2022
    CVE-2016-23885.3 MEDIUM⚡ Known ExploitedSAP NetWeaver
    SAP NetWeaver Information Disclosure VulnerabilityThe Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
    ScoreSeverityVersionVector String
    5.3MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  20. Added to KEVJun 9, 2022
    CVE-2016-23869.8 CRITICAL⚡ Known ExploitedSAP NetWeaver
    SAP NetWeaver SQL Injection VulnerabilitySQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVJun 8, 2022
    CVE-2019-152718.8 HIGH⚡ Known ExploitedCisco RV Series Routers
    Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityA deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  22. Added to KEVJun 8, 2022
    CVE-2019-71959.8 CRITICAL⚡ Known ExploitedQNAP Photo Station
    QNAP Photo Station Path Traversal VulnerabilityQNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  23. Added to KEVJun 8, 2022
    CVE-2019-71949.8 CRITICAL⚡ Known ExploitedQNAP Photo Station
    QNAP Photo Station Path Traversal VulnerabilityQNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  24. Added to KEVJun 8, 2022
    CVE-2019-71939.8 CRITICAL⚡ Known ExploitedQNAP QTS
    QNAP QTS Improper Input Validation VulnerabilityQNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  25. Added to KEVJun 8, 2022
    CVE-2019-71929.8 CRITICAL⚡ Known ExploitedQNAP Photo Station
    QNAP Photo Station Improper Access Control VulnerabilityQNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:36 UTC.

CVE Database: Latest Vulnerabilities | Secure.com