BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 11:52 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 47 of 71

  1. Added to KEVApr 11, 2022
    CVE-2020-25099.8 CRITICAL⚡ Known ExploitedQNAP QNAP Network-Attached Storage (NAS)
    QNAP Network-Attached Storage (NAS) Command Injection VulnerabilityQNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  2. Added to KEVApr 11, 2022
    CVE-2017-113179.8 CRITICAL⚡ Known ExploitedTelerik User Interface (UI) for ASP.NET AJAX
    Telerik UI for ASP.NET AJAX Unrestricted File Upload VulnerabilityTelerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  3. Added to KEVApr 6, 2022
    CVE-2021-311669.8 CRITICAL⚡ Known ExploitedMicrosoft HTTP Protocol Stack
    Microsoft HTTP Protocol Stack Remote Code Execution VulnerabilityMicrosoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  4. Added to KEVApr 6, 2022
    CVE-2021-31567.8 HIGH⚡ Known ExploitedSudo Sudo
    Sudo Heap-Based Buffer Overflow VulnerabilitySudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  5. Added to KEVApr 6, 2022
    CVE-2017-01488.1 HIGH⚡ Known ExploitedMicrosoft SMBv1 server
    Microsoft SMBv1 Server Remote Code Execution VulnerabilityThe SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.
    ScoreSeverityVersionVector String
    8.1HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  6. Added to KEVApr 4, 2022
    CVE-2022-229659.8 CRITICAL⚡ Known ExploitedVMware Spring Framework
    Spring Framework JDK 9+ Remote Code Execution VulnerabilitySpring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  7. Added to KEVApr 4, 2022
    CVE-2022-226757.8 HIGH⚡ Known ExploitedApple macOS
    Apple macOS Out-of-Bounds Write VulnerabilitymacOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  8. Added to KEVApr 4, 2022
    CVE-2022-226745.5 MEDIUM⚡ Known ExploitedApple macOS
    Apple macOS Out-of-Bounds Read VulnerabilitymacOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.
    ScoreSeverityVersionVector String
    5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    4.9MEDIUM2.0NVDAV:L/AC:L/Au:N/C:C/I:N/A:N
  9. Added to KEVApr 4, 2022
    CVE-2021-453829.8 CRITICAL⚡ Known ExploitedD-Link Multiple Routers
    D-Link Multiple Routers Remote Code Execution VulnerabilityA remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  10. Added to KEVMar 31, 2022
    CVE-2022-268719.8 CRITICAL⚡ Known ExploitedTrend Micro Apex Central
    Trend Micro Apex Central Arbitrary File Upload VulnerabilityAn arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  11. Added to KEVMar 31, 2022
    CVE-2022-10409.8 CRITICAL⚡ Known ExploitedSophos Firewall
    Sophos Firewall Authentication Bypass VulnerabilityAn authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  12. Added to KEVMar 31, 2022
    CVE-2021-344847.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows User Profile Service Privilege Escalation VulnerabilityMicrosoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  13. Added to KEVMar 31, 2022
    CVE-2021-2879910.0 CRITICAL⚡ Known ExploitedQNAP Network Attached Storage (NAS)
    QNAP NAS Improper Authorization VulnerabilityQNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  14. Added to KEVMar 31, 2022
    CVE-2021-215518.8 HIGH⚡ Known ExploitedDell dbutil Driver
    Dell dbutil Driver Insufficient Access Control VulnerabilityDell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  15. Added to KEVMar 31, 2022
    CVE-2018-105629.8 CRITICAL⚡ Known ExploitedDasan Gigabit Passive Optical Network (GPON) Routers
    Dasan GPON Routers Command Injection VulnerabilityDasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  16. Added to KEVMar 31, 2022
    CVE-2018-105619.8 CRITICAL⚡ Known ExploitedDasan Gigabit Passive Optical Network (GPON) Routers
    Dasan GPON Routers Authentication Bypass VulnerabilityDasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  17. Added to KEVMar 28, 2022
    CVE-2022-10968.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Type Confusion VulnerabilityGoogle Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  18. Added to KEVMar 28, 2022
    CVE-2022-054310.0 CRITICAL⚡ Known ExploitedRedis Debian-specific Redis Servers
    Debian-specific Redis Server Lua Sandbox Escape VulnerabilityRedis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVMar 28, 2022
    CVE-2021-386467.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityMicrosoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  20. Added to KEVMar 28, 2022
    CVE-2021-344867.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Event Tracing Privilege Escalation VulnerabilityMicrosoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVMar 28, 2022
    CVE-2021-260855.3 MEDIUM⚡ Known ExploitedAtlassian Confluence Server
    Atlassian Confluence Server Pre-Authorization Arbitrary File Read VulnerabilityAffected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.
    ScoreSeverityVersionVector String
    5.3MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  22. Added to KEVMar 28, 2022
    CVE-2021-200289.8 CRITICAL⚡ Known ExploitedSonicWall Secure Remote Access (SRA)
    SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilitySonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  23. Added to KEVMar 28, 2022
    CVE-2019-74837.5 HIGH⚡ Known ExploitedSonicWall SMA100
    SonicWall SMA100 Directory Traversal VulnerabilityIn SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  24. Added to KEVMar 28, 2022
    CVE-2018-84407.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Escalation VulnerabilityAn elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  25. Added to KEVMar 28, 2022
    CVE-2018-84067.8 HIGH⚡ Known ExploitedMicrosoft DirectX Graphics Kernel (DXGKRNL)
    Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 13:16 UTC.

CVE Database: Latest Vulnerabilities | Secure.com