BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 11:09 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 54 of 71

  1. Added to KEVMar 3, 2022
    CVE-2017-122317.5 HIGH⚡ Known ExploitedCisco IOS software
    Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityA vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    7.8HIGH2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
  2. Added to KEVMar 3, 2022
    CVE-2017-118267.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Remote Code Execution VulnerabilityA remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  3. Added to KEVMar 3, 2022
    CVE-2017-112928.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Type Confusion VulnerabilityAdobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.0MEDIUM2.0NVDAV:N/AC:M/Au:S/C:P/I:P/A:P
  4. Added to KEVMar 3, 2022
    CVE-2017-85407.8 HIGH⚡ Known ExploitedMicrosoft Malware Protection Engine
    Microsoft Malware Protection Engine Improper Restriction of Operations VulnerabilityThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to memory corruption. aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability".
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  5. Added to KEVMar 3, 2022
    CVE-2017-67448.8 HIGH⚡ Known ExploitedCisco IOS software
    Cisco IOS Software SNMP Remote Code Execution VulnerabilityThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  6. Added to KEVMar 3, 2022
    CVE-2017-67438.8 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  7. Added to KEVMar 3, 2022
    CVE-2017-67408.8 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  8. Added to KEVMar 3, 2022
    CVE-2017-67398.8 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  9. Added to KEVMar 3, 2022
    CVE-2017-67388.8 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  10. Added to KEVMar 3, 2022
    CVE-2017-67378.8 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  11. Added to KEVMar 3, 2022
    CVE-2017-67368.8 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  12. Added to KEVMar 3, 2022
    CVE-2017-66636.5 MEDIUM⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS Software and Cisco IOS XE Software Denial-of-Service VulnerabilityA vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in denial-of-service (DoS).
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    6.1MEDIUM2.0NVDAV:A/AC:L/Au:N/C:N/I:N/A:C
  13. Added to KEVMar 3, 2022
    CVE-2017-66277.5 HIGH⚡ Known ExploitedCisco IOS and IOS XE Software
    Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service VulnerabilityA vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:P
  14. Added to KEVMar 3, 2022
    CVE-2017-02617.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Use-After-Free VulnerabilityMicrosoft Office contains a use-after-free vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  15. Added to KEVMar 3, 2022
    CVE-2017-00017.8 HIGH⚡ Known ExploitedMicrosoft Graphics Device Interface (GDI)
    Microsoft Graphics Device Interface (GDI) Privilege Escalation VulnerabilityThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  16. Added to KEVMar 3, 2022
    CVE-2016-85627.5 HIGH⚡ Known ExploitedSiemens SIMATIC CP
    Siemens SIMATIC CP 1543-1 Improper Privilege Management VulnerabilityAn improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    3.5LOW2.0NVDAV:N/AC:M/Au:S/C:N/I:N/A:P
  17. Added to KEVMar 3, 2022
    CVE-2016-78558.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Use-After-Free VulnerabilityUse-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  18. Added to KEVMar 3, 2022
    CVE-2016-72627.8 HIGH⚡ Known ExploitedMicrosoft Excel
    Microsoft Office Security Feature Bypass VulnerabilityA security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  19. Added to KEVMar 3, 2022
    CVE-2016-71937.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Memory Corruption VulnerabilityMicrosoft Office contains a memory corruption vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  20. Added to KEVMar 3, 2022
    CVE-2016-51957.0 HIGH⚡ Known ExploitedLinux Kernel
    Linux Kernel Race Condition VulnerabilityRace condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.
    ScoreSeverityVersionVector String
    7.0HIGH3.1NVDCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  21. Added to KEVMar 3, 2022
    CVE-2016-41179.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Arbitrary Code Execution VulnerabilityAn access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  22. Added to KEVMar 3, 2022
    CVE-2016-10199.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Arbitrary Code Execution VulnerabilityAdobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  23. Added to KEVMar 3, 2022
    CVE-2016-00997.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityA privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  24. Added to KEVMar 3, 2022
    CVE-2015-76457.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Arbitrary Code Execution VulnerabilityAdobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  25. Added to KEVMar 3, 2022
    CVE-2015-51199.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Use-After-Free VulnerabilityA use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 12:00 UTC.

CVE Database: Latest Vulnerabilities | Secure.com