BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 11:24 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 52 of 71

  1. Added to KEVMar 15, 2022
    CVE-2018-81207.0 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityA privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
    ScoreSeverityVersionVector String
    7.0HIGH3.1NVDCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  2. Added to KEVMar 15, 2022
    CVE-2017-01017.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Transaction Manager Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  3. Added to KEVMar 15, 2022
    CVE-2016-33097.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Privilege Escalation VulnerabilityA privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  4. Added to KEVMar 15, 2022
    CVE-2015-25468.2 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Memory Corruption VulnerabilityThe kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
    ScoreSeverityVersionVector String
    8.2HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
    6.9MEDIUM2.0NVDAV:L/AC:M/Au:N/C:C/I:C/A:C
  5. Added to KEVMar 7, 2022
    CVE-2022-264869.6 CRITICAL⚡ Known ExploitedMozilla Firefox
    Mozilla Firefox Use-After-Free VulnerabilityMozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
    ScoreSeverityVersionVector String
    9.6CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
  6. Added to KEVMar 7, 2022
    CVE-2022-264858.8 HIGH⚡ Known ExploitedMozilla Firefox
    Mozilla Firefox Use-After-Free VulnerabilityMozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  7. Added to KEVMar 7, 2022
    CVE-2021-219735.3 MEDIUM⚡ Known ExploitedVMware vCenter Server and Cloud Foundation
    VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityVMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
    ScoreSeverityVersionVector String
    5.3MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  8. Added to KEVMar 7, 2022
    CVE-2020-82187.2 HIGH⚡ Known ExploitedPulse Secure Pulse Connect Secure
    Pulse Connect Secure Code Injection VulnerabilityA code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
    ScoreSeverityVersionVector String
    7.2HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  9. Added to KEVMar 7, 2022
    CVE-2019-115819.8 CRITICAL⚡ Known ExploitedAtlassian Jira Server and Data Center
    Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityAtlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  10. Added to KEVMar 7, 2022
    CVE-2017-60779.8 CRITICAL⚡ Known ExploitedNETGEAR Wireless Router DGN2200
    NETGEAR DGN2200 Remote Code Execution VulnerabilityNETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  11. Added to KEVMar 7, 2022
    CVE-2016-62778.8 HIGH⚡ Known ExploitedNETGEAR Multiple Routers
    NETGEAR Multiple Routers Remote Code Execution VulnerabilityNETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  12. Added to KEVMar 7, 2022
    CVE-2013-06317.5 HIGH⚡ Known ExploitedAdobe ColdFusion
    Adobe ColdFusion Information Disclosure VulnerabilityAdobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  13. Added to KEVMar 7, 2022
    CVE-2013-06297.5 HIGH⚡ Known ExploitedAdobe ColdFusion
    Adobe ColdFusion Directory Traversal VulnerabilityAdobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  14. Added to KEVMar 7, 2022
    CVE-2013-06259.8 CRITICAL⚡ Known ExploitedAdobe ColdFusion
    Adobe ColdFusion Authentication Bypass VulnerabilityAdobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  15. Added to KEVMar 7, 2022
    CVE-2009-39606.5 MEDIUM⚡ Known ExploitedAdobe BlazeDS
    Adobe BlazeDS Information Disclosure VulnerabilityAdobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  16. Added to KEVMar 3, 2022
    CVE-2022-2070810.0 CRITICAL⚡ Known ExploitedCisco Small Business RV160, RV260, RV340, and RV345 Series Routers
    Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityA vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    8.0HIGH3.1NVDCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  17. Added to KEVMar 3, 2022
    CVE-2022-2070310.0 CRITICAL⚡ Known ExploitedCisco Small Business RV160, RV260, RV340, and RV345 Series Routers
    Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityA vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    8.0HIGH3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  18. Added to KEVMar 3, 2022
    CVE-2022-2070110.0 CRITICAL⚡ Known ExploitedCisco Small Business RV160, RV260, RV340, and RV345 Series Routers
    Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityA vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVMar 3, 2022
    CVE-2022-2070010.0 CRITICAL⚡ Known ExploitedCisco Small Business RV160, RV260, RV340, and RV345 Series Routers
    Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityA vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVMar 3, 2022
    CVE-2022-2069910.0 CRITICAL⚡ Known ExploitedCisco Small Business RV160, RV260, RV340, and RV345 Series Routers
    Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityA vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  21. Added to KEVMar 3, 2022
    CVE-2021-413797.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Installer Privilege Escalation VulnerabilityMicrosoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    5.5MEDIUM3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  22. Added to KEVMar 3, 2022
    CVE-2020-118995.4 MEDIUM⚡ Known ExploitedTreck TCP/IP stack IPv6
    Treck TCP/IP stack Out-of-Bounds Read VulnerabilityThe Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.
    ScoreSeverityVersionVector String
    5.4MEDIUM3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
    4.8MEDIUM2.0NVDAV:A/AC:L/Au:N/C:N/I:P/A:P
  23. Added to KEVMar 3, 2022
    CVE-2020-19389.8 CRITICAL⚡ Known ExploitedApache Tomcat
    Apache Tomcat Improper Privilege Management VulnerabilityApache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  24. Added to KEVMar 3, 2022
    CVE-2019-169289.8 CRITICAL⚡ Known ExploitedExim Exim Internet Mailer
    Exim Out-of-bounds Write VulnerabilityExim contains an out-of-bounds write vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  25. Added to KEVMar 3, 2022
    CVE-2019-16527.2 HIGH⚡ Known ExploitedCisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers
    Cisco Small Business Routers Improper Input Validation VulnerabilityA vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands.
    ScoreSeverityVersionVector String
    7.2HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 12:18 UTC.

CVE Database: Latest Vulnerabilities | Secure.com