BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 11:24 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 51 of 71

  1. Added to KEVMar 25, 2022
    CVE-2014-31208.1 HIGH⚡ Known ExploitedElastic Elasticsearch
    Elasticsearch Remote Code Execution VulnerabilityElasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.
    ScoreSeverityVersionVector String
    8.1HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  2. Added to KEVMar 25, 2022
    CVE-2014-01307.5 HIGH⚡ Known ExploitedRails Ruby on Rails
    Ruby on Rails Directory Traversal VulnerabilityDirectory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  3. Added to KEVMar 25, 2022
    CVE-2013-52235.4 MEDIUM⚡ Known ExploitedD-Link DSL-2760U
    D-Link DSL-2760U Gateway Cross-Site Scripting VulnerabilityA cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML.
    ScoreSeverityVersionVector String
    5.4MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
    3.5LOW2.0NVDAV:N/AC:M/Au:S/C:N/I:P/A:N
  4. Added to KEVMar 25, 2022
    CVE-2013-48109.8 CRITICAL⚡ Known ExploitedHewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
    HP Multiple Products Remote Code Execution VulnerabilityHP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  5. Added to KEVMar 25, 2022
    CVE-2013-22519.8 CRITICAL⚡ Known ExploitedApache Struts
    Apache Struts Improper Input Validation VulnerabilityApache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  6. Added to KEVMar 25, 2022
    CVE-2012-18239.8 CRITICAL⚡ Known ExploitedPHP PHP
    PHP-CGI Query String Parameter Vulnerabilitysapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  7. Added to KEVMar 25, 2022
    CVE-2010-43457.8 HIGH⚡ Known ExploitedExim Exim
    Exim Privilege Escalation VulnerabilityExim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.9MEDIUM2.0NVDAV:L/AC:M/Au:N/C:C/I:C/A:C
  8. Added to KEVMar 25, 2022
    CVE-2010-43449.8 CRITICAL⚡ Known ExploitedExim Exim
    Exim Heap-Based Buffer Overflow VulnerabilityHeap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  9. Added to KEVMar 25, 2022
    CVE-2010-30357.5 HIGH⚡ Known ExploitedCisco IOS XR
    Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityCisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:P
  10. Added to KEVMar 25, 2022
    CVE-2010-28619.8 CRITICAL⚡ Known ExploitedAdobe ColdFusion
    Adobe ColdFusion Directory Traversal VulnerabilityA directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  11. Added to KEVMar 25, 2022
    CVE-2009-20555.9 MEDIUM⚡ Known ExploitedCisco IOS XR
    Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityCisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
    ScoreSeverityVersionVector String
    5.9MEDIUM3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:N/A:P
  12. Added to KEVMar 25, 2022
    CVE-2009-11519.8 CRITICAL⚡ Known ExploitedphpMyAdmin phpMyAdmin
    phpMyAdmin Remote Code Execution VulnerabilitySetup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  13. Added to KEVMar 25, 2022
    CVE-2009-09278.8 HIGH⚡ Known ExploitedAdobe Reader and Acrobat
    Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityStack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  14. Added to KEVMar 25, 2022
    CVE-2005-27739.8 CRITICAL⚡ Known ExploitedHewlett Packard (HP) OpenView Network Node Manager
    HP OpenView Network Node Manager Remote Code Execution VulnerabilityHP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  15. Added to KEVMar 15, 2022
    CVE-2020-51359.8 CRITICAL⚡ Known ExploitedSonicWall SonicOS
    SonicWall SonicOS Buffer Overflow VulnerabilityA buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  16. Added to KEVMar 15, 2022
    CVE-2019-14057.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  17. Added to KEVMar 15, 2022
    CVE-2019-13227.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  18. Added to KEVMar 15, 2022
    CVE-2019-13157.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVMar 15, 2022
    CVE-2019-12537.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows AppX Deployment Server Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVMar 15, 2022
    CVE-2019-11327.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityA privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  21. Added to KEVMar 15, 2022
    CVE-2019-11297.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  22. Added to KEVMar 15, 2022
    CVE-2019-10697.8 HIGH⚡ Known ExploitedMicrosoft Task Scheduler
    Microsoft Task Scheduler Privilege Escalation VulnerabilityA privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  23. Added to KEVMar 15, 2022
    CVE-2019-10647.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  24. Added to KEVMar 15, 2022
    CVE-2019-08417.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  25. Added to KEVMar 15, 2022
    CVE-2019-05437.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 12:29 UTC.

CVE Database: Latest Vulnerabilities | Secure.com