BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 11:24 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 46 of 71

  1. Added to KEVApr 15, 2022
    CVE-2022-13648.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Type Confusion VulnerabilityGoogle Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  2. Added to KEVApr 15, 2022
    CVE-2019-160579.8 CRITICAL⚡ Known ExploitedD-Link DNS-320 Storage Device
    D-Link DNS-320 Remote Code Execution VulnerabilityThe login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  3. Added to KEVApr 15, 2022
    CVE-2019-39299.8 CRITICAL⚡ Known ExploitedCrestron Multiple Products
    Crestron Multiple Products Command Injection VulnerabilityMultiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  4. Added to KEVApr 15, 2022
    CVE-2018-78419.8 CRITICAL⚡ Known ExploitedSchneider Electric U.motion Builder
    Schneider Electric U.motion Builder SQL Injection VulnerabilityA SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  5. Added to KEVApr 15, 2022
    CVE-2016-45237.5 HIGH⚡ Known ExploitedTrihedral VTScada (formerly VTS)
    Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityThe WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:P
  6. Added to KEVApr 15, 2022
    CVE-2014-07809.8 CRITICAL⚡ Known ExploitedInduSoft Web Studio
    InduSoft Web Studio NTWebServer Directory Traversal VulnerabilityInduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0CNAAV:N/AC:L/Au:N/C:P/I:P/A:P
  7. Added to KEVApr 15, 2022
    CVE-2010-53309.8 CRITICAL⚡ Known ExploitedUbiquiti AirOS
    Ubiquiti AirOS Command Injection VulnerabilityCertain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  8. Added to KEVApr 15, 2022
    CVE-2007-30109.8 CRITICAL⚡ Known ExploitedAlcatel OmniPCX Enterprise
    Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilitymasterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  9. Added to KEVApr 14, 2022
    CVE-2022-229549.8 CRITICAL⚡ Known ExploitedVMware Workspace ONE Access and Identity Manager
    VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityVMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  10. Added to KEVApr 13, 2022
    CVE-2022-245217.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows CLFS Driver Privilege Escalation VulnerabilityMicrosoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  11. Added to KEVApr 13, 2022
    CVE-2018-207539.8 CRITICAL⚡ Known ExploitedKaseya Virtual System/Server Administrator (VSA)
    Kaseya VSA Remote Code Execution VulnerabilityKaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  12. Added to KEVApr 13, 2022
    CVE-2018-76029.8 CRITICAL⚡ Known ExploitedDrupal Core
    Drupal Core Remote Code Execution VulnerabilityA remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    8.1HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  13. Added to KEVApr 13, 2022
    CVE-2015-51239.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Use-After-Free VulnerabilityUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  14. Added to KEVApr 13, 2022
    CVE-2015-51229.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Use-After-Free VulnerabilityUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  15. Added to KEVApr 13, 2022
    CVE-2015-31139.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Heap-Based Buffer Overflow VulnerabilityHeap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  16. Added to KEVApr 13, 2022
    CVE-2015-25028.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  17. Added to KEVApr 13, 2022
    CVE-2015-03139.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Use-After-Free VulnerabilityUse-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  18. Added to KEVApr 13, 2022
    CVE-2015-03119.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Remote Code Execution VulnerabilityUnspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVApr 13, 2022
    CVE-2014-91637.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Stack-Based Buffer Overflow VulnerabilityStack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVApr 11, 2022
    CVE-2022-231768.8 HIGH⚡ Known ExploitedWatchGuard Firebox and XTM
    WatchGuard Firebox and XTM Privilege Escalation VulnerabilityWatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  21. Added to KEVApr 11, 2022
    CVE-2021-422878.8 HIGH⚡ Known ExploitedMicrosoft Active Directory
    Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityMicrosoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH3.1CNACVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  22. Added to KEVApr 11, 2022
    CVE-2021-422787.5 HIGH⚡ Known ExploitedMicrosoft Active Directory
    Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityMicrosoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.5HIGH3.1CNACVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  23. Added to KEVApr 11, 2022
    CVE-2021-397937.8 HIGH⚡ Known ExploitedGoogle Pixel
    Google Pixel Out-of-Bounds Write VulnerabilityGoogle Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  24. Added to KEVApr 11, 2022
    CVE-2021-278529.8 CRITICAL⚡ Known ExploitedCheckbox Checkbox Survey
    Checkbox Survey Deserialization of Untrusted Data VulnerabilityDeserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  25. Added to KEVApr 11, 2022
    CVE-2021-226007.0 HIGH⚡ Known ExploitedLinux Kernel
    Linux Kernel Privilege Escalation VulnerabilityLinux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.
    ScoreSeverityVersionVector String
    7.0HIGH3.1NVDCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.6MEDIUM3.1CNACVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 13:28 UTC.

CVE Database: Latest Vulnerabilities | Secure.com