BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 13:17 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 43 of 71

  1. Added to KEVMay 25, 2022
    CVE-2014-40777.8 HIGH⚡ Known ExploitedMicrosoft Input Method Editor (IME) Japanese
    Microsoft IME Japanese Privilege Escalation VulnerabilityMicrosoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  2. Added to KEVMay 25, 2022
    CVE-2014-31537.8 HIGH⚡ Known ExploitedLinux Kernel
    Linux Kernel Privilege Escalation VulnerabilityThe futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  3. Added to KEVMay 25, 2022
    CVE-2014-28178.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Privilege Escalation VulnerabilityMicrosoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  4. Added to KEVMay 25, 2022
    CVE-2014-05469.8 CRITICAL⚡ Known ExploitedAdobe Reader and Acrobat
    Adobe Reader and Acrobat Sandbox Bypass VulnerabilityAdobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  5. Added to KEVMay 25, 2022
    CVE-2013-73316.5 MEDIUM⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Information Disclosure VulnerabilityAn information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This vulnerability could allow an attacker to detect anti-malware applications.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  6. Added to KEVMay 25, 2022
    CVE-2013-39936.5 MEDIUM⚡ Known ExploitedIBM InfoSphere BigInsights
    IBM InfoSphere BigInsights Invalid Input VulnerabilityCertain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    3.5LOW2.0NVDAV:N/AC:M/Au:S/C:P/I:N/A:N
  7. Added to KEVMay 25, 2022
    CVE-2013-38965.5 MEDIUM⚡ Known ExploitedMicrosoft Silverlight
    Microsoft Silverlight Information Disclosure VulnerabilityMicrosoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application.
    ScoreSeverityVersionVector String
    5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  8. Added to KEVMay 25, 2022
    CVE-2013-24233.7 LOW⚡ Known ExploitedOracle Java Runtime Environment (JRE)
    Oracle JRE Unspecified VulnerabilityUnspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.
    ScoreSeverityVersionVector String
    3.7LOW3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  9. Added to KEVMay 25, 2022
    CVE-2013-04313.7 LOW⚡ Known ExploitedOracle Java Runtime Environment (JRE)
    Oracle JRE Sandbox Bypass VulnerabilityUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
    ScoreSeverityVersionVector String
    3.7LOW3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:P/A:N
  10. Added to KEVMay 25, 2022
    CVE-2013-04229.8 CRITICAL⚡ Known ExploitedOracle Java Runtime Environment (JRE)
    Oracle JRE Remote Code Execution VulnerabilityA vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  11. Added to KEVMay 25, 2022
    CVE-2013-00747.8 HIGH⚡ Known ExploitedMicrosoft Silverlight
    Microsoft Silverlight Double Dereference VulnerabilityMicrosoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  12. Added to KEVMay 25, 2022
    CVE-2012-17109.8 CRITICAL⚡ Known ExploitedOracle Fusion Middleware
    Oracle Fusion Middleware Unspecified VulnerabilityUnspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  13. Added to KEVMay 25, 2022
    CVE-2010-14287.5 HIGH⚡ Known ExploitedRed Hat JBoss
    Red Hat JBoss Information Disclosure VulnerabilityUnauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.9MEDIUM3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  14. Added to KEVMay 25, 2022
    CVE-2010-08409.8 CRITICAL⚡ Known ExploitedOracle Java Runtime Environment (JRE)
    Oracle JRE Unspecified VulnerabilityUnspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  15. Added to KEVMay 25, 2022
    CVE-2010-07385.3 MEDIUM⚡ Known ExploitedRed Hat JBoss
    Red Hat JBoss Authentication Bypass VulnerabilityThe JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
    ScoreSeverityVersionVector String
    5.3MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    3.7LOW3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  16. Added to KEVMay 24, 2022
    CVE-2018-199536.1 MEDIUM⚡ Known ExploitedQNAP Network Attached Storage (NAS)
    QNAP NAS File Station Cross-Site Scripting VulnerabilityA cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
    ScoreSeverityVersionVector String
    6.1MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  17. Added to KEVMay 24, 2022
    CVE-2018-199499.8 CRITICAL⚡ Known ExploitedQNAP Network Attached Storage (NAS)
    QNAP NAS File Station Command Injection VulnerabilityA command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  18. Added to KEVMay 24, 2022
    CVE-2018-199438.0 HIGH⚡ Known ExploitedQNAP Network Attached Storage (NAS)
    QNAP NAS File Station Cross-Site Scripting VulnerabilityA cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
    ScoreSeverityVersionVector String
    8.0HIGH3.1CNACVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
    5.4MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
    3.5LOW2.0NVDAV:N/AC:M/Au:S/C:N/I:P/A:N
  19. Added to KEVMay 24, 2022
    CVE-2018-86117.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVMay 24, 2022
    CVE-2017-183629.8 CRITICAL⚡ Known ExploitedKaseya Virtual System/Server Administrator (VSA)
    Kaseya VSA SQL Injection VulnerabilityConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVMay 24, 2022
    CVE-2017-85439.8 CRITICAL⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Search Remote Code Execution VulnerabilityMicrosoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  22. Added to KEVMay 24, 2022
    CVE-2017-82917.8 HIGH⚡ Known ExploitedArtifex Ghostscript
    Artifex Ghostscript Type Confusion VulnerabilityArtifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  23. Added to KEVMay 24, 2022
    CVE-2017-02108.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  24. Added to KEVMay 24, 2022
    CVE-2017-01498.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  25. Added to KEVMay 24, 2022
    CVE-2017-01477.5 HIGH⚡ Known ExploitedMicrosoft SMBv1 server
    Microsoft Windows SMBv1 Information Disclosure VulnerabilityThe SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:07 UTC.