BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 13:28 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 45 of 71

  1. Added to KEVMay 23, 2022
    CVE-2019-11307.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows AppX Deployment Service Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  2. Added to KEVMay 23, 2022
    CVE-2019-08807.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Escalation VulnerabilityA local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  3. Added to KEVMay 23, 2022
    CVE-2019-07036.5 MEDIUM⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows SMB Information Disclosure VulnerabilityAn information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    4.0MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:N/A:N
  4. Added to KEVMay 23, 2022
    CVE-2019-06766.5 MEDIUM⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Information Disclosure VulnerabilityAn information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  5. Added to KEVMay 23, 2022
    CVE-2018-85897.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  6. Added to KEVMay 23, 2022
    CVE-2018-50027.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Stack-based Buffer Overflow VulnerabilityAdobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  7. Added to KEVMay 16, 2022
    CVE-2022-305259.8 CRITICAL⚡ Known ExploitedZyxel Multiple Firewalls
    Zyxel Multiple Firewalls OS Command Injection VulnerabilityA command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  8. Added to KEVMay 16, 2022
    CVE-2022-2294710.0 CRITICAL⚡ Known ExploitedVMware Spring Cloud Gateway
    VMware Spring Cloud Gateway Code Injection VulnerabilitySpring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  9. Added to KEVMay 10, 2022
    CVE-2022-13889.8 CRITICAL⚡ Known ExploitedF5 BIG-IP
    F5 BIG-IP Missing Authentication VulnerabilityF5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  10. Added to KEVMay 4, 2022
    CVE-2021-17898.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Type Confusion VulnerabilityA type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  11. Added to KEVMay 4, 2022
    CVE-2019-85068.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Type Confusion VulnerabilityA type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  12. Added to KEVMay 4, 2022
    CVE-2014-41137.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  13. Added to KEVMay 4, 2022
    CVE-2014-03228.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Use-After-Free VulnerabilityUse-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  14. Added to KEVMay 4, 2022
    CVE-2014-01607.5 HIGH⚡ Known ExploitedOpenSSL OpenSSL
    OpenSSL Information Disclosure VulnerabilityThe TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  15. Added to KEVApr 25, 2022
    CVE-2022-294649.8 CRITICAL⚡ Known ExploitedWSO2 Multiple Products
    WSO2 Multiple Products Unrestrictive Upload of File VulnerabilityMultiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  16. Added to KEVApr 25, 2022
    CVE-2022-269047.0 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows User Profile Service Privilege Escalation VulnerabilityMicrosoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.0HIGH3.1CNACVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.4MEDIUM2.0NVDAV:L/AC:M/Au:N/C:P/I:P/A:P
  17. Added to KEVApr 25, 2022
    CVE-2022-219197.0 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows User Profile Service Privilege Escalation VulnerabilityMicrosoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.0HIGH3.1CNACVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.9MEDIUM2.0NVDAV:L/AC:M/Au:N/C:C/I:C/A:C
  18. Added to KEVApr 25, 2022
    CVE-2022-08477.8 HIGH⚡ Known ExploitedLinux Kernel
    Linux Kernel Privilege Escalation VulnerabilityLinux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVApr 25, 2022
    CVE-2021-413577.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  20. Added to KEVApr 25, 2022
    CVE-2021-404507.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVApr 25, 2022
    CVE-2019-10030299.9 CRITICAL⚡ Known ExploitedJenkins Script Security Plugin
    Jenkins Script Security Plugin Sandbox Bypass VulnerabilityJenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
    ScoreSeverityVersionVector String
    9.9CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  22. Added to KEVApr 19, 2022
    CVE-2022-227187.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Print Spooler Privilege Escalation VulnerabilityMicrosoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  23. Added to KEVApr 19, 2022
    CVE-2019-35689.8 CRITICAL⚡ Known ExploitedMeta Platforms WhatsApp
    WhatsApp VOIP Stack Buffer Overflow VulnerabilityA buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  24. Added to KEVApr 19, 2022
    CVE-2018-68826.1 MEDIUM⚡ Known ExploitedSynacor Zimbra Collaboration Suite (ZCS)
    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilitySynacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.
    ScoreSeverityVersionVector String
    6.1MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  25. Added to KEVApr 15, 2022
    CVE-2022-229607.8 HIGH⚡ Known ExploitedVMware Multiple Products
    VMware Multiple Products Privilege Escalation VulnerabilityVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 13:35 UTC.

CVE Database: Latest Vulnerabilities | Secure.com