BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 11:09 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 53 of 71

  1. Added to KEVMar 3, 2022
    CVE-2019-12978.8 HIGH⚡ Known ExploitedMicrosoft Excel
    Microsoft Excel Remote Code Execution VulnerabilityA remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  2. Added to KEVMar 3, 2022
    CVE-2018-85817.4 HIGH⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Privilege Escalation VulnerabilityA privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.
    ScoreSeverityVersionVector String
    7.4HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
    5.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:N
  3. Added to KEVMar 3, 2022
    CVE-2018-82987.5 HIGH⚡ Known ExploitedChakraCore ChakraCore scripting engine
    ChakraCore Scripting Engine Type Confusion VulnerabilityThe ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  4. Added to KEVMar 3, 2022
    CVE-2018-01806.8 MEDIUM⚡ Known ExploitedCisco IOS Software
    Cisco IOS Software Denial-of-Service VulnerabilityA vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
    ScoreSeverityVersionVector String
    6.8MEDIUM3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
    5.9MEDIUM3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.1HIGH2.0NVDAV:N/AC:M/Au:N/C:N/I:N/A:C
  5. Added to KEVMar 3, 2022
    CVE-2018-01796.8 MEDIUM⚡ Known ExploitedCisco IOS Software
    Cisco IOS Software Denial-of-Service VulnerabilityA vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
    ScoreSeverityVersionVector String
    6.8MEDIUM3.1CISA-ADPCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
    5.9MEDIUM3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.1HIGH2.0NVDAV:N/AC:M/Au:N/C:N/I:N/A:C
  6. Added to KEVMar 3, 2022
    CVE-2018-01758.0 HIGH⚡ Known ExploitedCisco IOS, XR, and XE Software
    Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityFormat string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.
    ScoreSeverityVersionVector String
    8.0HIGH3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.9HIGH2.0NVDAV:A/AC:M/Au:N/C:C/I:C/A:C
  7. Added to KEVMar 3, 2022
    CVE-2018-01748.6 HIGH⚡ Known ExploitedCisco IOS XE Software
    Cisco IOS Software and Cisco IOS XE Software Improper Input Validation VulnerabilityA vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
    ScoreSeverityVersionVector String
    8.6HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  8. Added to KEVMar 3, 2022
    CVE-2018-01738.6 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityA vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets can allow for denial-of-service (DoS).
    ScoreSeverityVersionVector String
    8.6HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  9. Added to KEVMar 3, 2022
    CVE-2018-01728.6 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityA vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
    ScoreSeverityVersionVector String
    8.6HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  10. Added to KEVMar 3, 2022
    CVE-2018-01678.8 HIGH⚡ Known ExploitedCisco IOS, XR, and XE Software
    Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityThere is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    8.3HIGH2.0NVDAV:A/AC:L/Au:N/C:C/I:C/A:C
  11. Added to KEVMar 3, 2022
    CVE-2018-01616.3 MEDIUM⚡ Known ExploitedCisco IOS Software
    Cisco IOS Software Resource Management Errors VulnerabilityA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.
    ScoreSeverityVersionVector String
    6.3MEDIUM3.1NVDCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
    6.3MEDIUM2.0NVDAV:N/AC:M/Au:S/C:N/I:N/A:C
  12. Added to KEVMar 3, 2022
    CVE-2018-01597.5 HIGH⚡ Known ExploitedCisco IOS Software and Cisco IOS XE Software
    Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service VulnerabilityA vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  13. Added to KEVMar 3, 2022
    CVE-2018-01588.6 HIGH⚡ Known ExploitedCisco IOS Software and Cisco IOS XE Software
    Cisco IOS and XE Software Internet Key Exchange Memory Leak VulnerabilityA vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.
    ScoreSeverityVersionVector String
    8.6HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  14. Added to KEVMar 3, 2022
    CVE-2018-01567.5 HIGH⚡ Known ExploitedCisco IOS Software and Cisco IOS XE Software
    Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service VulnerabilityA vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service (DoS) condition.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  15. Added to KEVMar 3, 2022
    CVE-2018-01558.6 HIGH⚡ Known ExploitedCisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches
    Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service VulnerabilityA vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial-of-service (DoS) condition.
    ScoreSeverityVersionVector String
    8.6HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  16. Added to KEVMar 3, 2022
    CVE-2018-01547.5 HIGH⚡ Known ExploitedCisco IOS Software
    Cisco IOS Software Integrated Services Module for VPN Denial-of-Service VulnerabilityA vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  17. Added to KEVMar 3, 2022
    CVE-2018-01519.8 CRITICAL⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution VulnerabilityA vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  18. Added to KEVMar 3, 2022
    CVE-2017-123195.9 MEDIUM⚡ Known ExploitedCisco IOS XE Software
    Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service VulnerabilityA vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability.
    ScoreSeverityVersionVector String
    5.9MEDIUM3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.1HIGH2.0NVDAV:N/AC:M/Au:N/C:N/I:N/A:C
  19. Added to KEVMar 3, 2022
    CVE-2017-122409.8 CRITICAL⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software DHCP Remote Code Execution VulnerabilityThe Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVMar 3, 2022
    CVE-2017-122386.5 MEDIUM⚡ Known ExploitedCisco Catalyst 6800 Series Switches
    Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service VulnerabilityA vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a denial of service.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    3.3LOW2.0NVDAV:A/AC:L/Au:N/C:N/I:N/A:P
  21. Added to KEVMar 3, 2022
    CVE-2017-122377.5 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service VulnerabilityA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and Cisco IOS XE could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  22. Added to KEVMar 3, 2022
    CVE-2017-122357.5 HIGH⚡ Known ExploitedCisco IOS software
    Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityA vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  23. Added to KEVMar 3, 2022
    CVE-2017-122347.5 HIGH⚡ Known ExploitedCisco IOS software
    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityThere is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  24. Added to KEVMar 3, 2022
    CVE-2017-122337.5 HIGH⚡ Known ExploitedCisco IOS software
    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityThere is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  25. Added to KEVMar 3, 2022
    CVE-2017-122326.5 MEDIUM⚡ Known ExploitedCisco IOS software
    Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service VulnerabilityA vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    6.1MEDIUM2.0NVDAV:A/AC:L/Au:N/C:N/I:N/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 12:07 UTC.

CVE Database: Latest Vulnerabilities | Secure.com