BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 10:41 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 55 of 71

  1. Added to KEVMar 3, 2022
    CVE-2015-49025.3 MEDIUM⚡ Known ExploitedOracle Java SE
    Oracle Java SE Integrity Check VulnerabilityUnspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.
    ScoreSeverityVersionVector String
    5.3MEDIUM3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:P/A:N
  2. Added to KEVMar 3, 2022
    CVE-2015-30439.8 CRITICAL⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Memory Corruption VulnerabilityA memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  3. Added to KEVMar 3, 2022
    CVE-2015-25909.8 CRITICAL⚡ Known ExploitedOracle Java SE
    Oracle Java SE and Java SE Embedded Remote Code Execution VulnerabilityAn unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  4. Added to KEVMar 3, 2022
    CVE-2015-25457.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Malformed EPS File VulnerabilityMicrosoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  5. Added to KEVMar 3, 2022
    CVE-2015-24248.8 HIGH⚡ Known ExploitedMicrosoft PowerPoint
    Microsoft PowerPoint Memory Corruption VulnerabilityMicrosoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  6. Added to KEVMar 3, 2022
    CVE-2015-23877.8 HIGH⚡ Known ExploitedMicrosoft ATM Font Driver
    Microsoft ATM Font Driver Privilege Escalation VulnerabilityATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  7. Added to KEVMar 3, 2022
    CVE-2015-17017.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityAn unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  8. Added to KEVMar 3, 2022
    CVE-2015-16427.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Memory Corruption VulnerabilityMicrosoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  9. Added to KEVMar 3, 2022
    CVE-2014-41147.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution VulnerabilityA vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  10. Added to KEVMar 3, 2022
    CVE-2014-04968.8 HIGH⚡ Known ExploitedAdobe Reader and Acrobat
    Adobe Reader and Acrobat Use-After-Free VulnerabilityAdobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  11. Added to KEVMar 3, 2022
    CVE-2013-50657.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Privilege Escalation VulnerabilityMicrosoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  12. Added to KEVMar 3, 2022
    CVE-2013-38978.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Use-After-Free VulnerabilityA use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  13. Added to KEVMar 3, 2022
    CVE-2013-33469.8 CRITICAL⚡ Known ExploitedAdobe Reader and Acrobat
    Adobe Reader and Acrobat Memory Corruption VulnerabilityAdobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    8.8HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  14. Added to KEVMar 3, 2022
    CVE-2013-16756.5 MEDIUM⚡ Known ExploitedMozilla Firefox
    Mozilla Firefox Information Disclosure VulnerabilityMozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  15. Added to KEVMar 3, 2022
    CVE-2013-13478.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Remote Code Execution VulnerabilityThis vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  16. Added to KEVMar 3, 2022
    CVE-2013-06417.8 HIGH⚡ Known ExploitedAdobe Reader
    Adobe Reader Buffer Overflow VulnerabilityA buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  17. Added to KEVMar 3, 2022
    CVE-2013-06407.8 HIGH⚡ Known ExploitedAdobe Reader and Acrobat
    Adobe Reader and Acrobat Memory Corruption VulnerabilityAn memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  18. Added to KEVMar 3, 2022
    CVE-2013-06329.8 CRITICAL⚡ Known ExploitedAdobe ColdFusion
    Adobe ColdFusion Authentication Bypass VulnerabilityAn authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVMar 3, 2022
    CVE-2012-46819.8 CRITICAL⚡ Known ExploitedOracle Java SE
    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityThe Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVMar 3, 2022
    CVE-2012-18568.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office MSCOMCTL.OCX Remote Code Execution VulnerabilityThe TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  21. Added to KEVMar 3, 2022
    CVE-2012-17239.8 CRITICAL⚡ Known ExploitedOracle Java SE
    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  22. Added to KEVMar 3, 2022
    CVE-2012-15357.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Arbitrary Code Execution VulnerabilityUnspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  23. Added to KEVMar 3, 2022
    CVE-2012-05079.8 CRITICAL⚡ Known ExploitedOracle Java SE
    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityAn incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  24. Added to KEVMar 3, 2022
    CVE-2011-35449.8 CRITICAL⚡ Known ExploitedOracle Java SE JDK and JRE
    Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityAn access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  25. Added to KEVMar 3, 2022
    CVE-2011-18899.8 CRITICAL⚡ Known ExploitedMicrosoft Forefront Threat Management Gateway (TMG)
    Microsoft Forefront TMG Remote Code Execution VulnerabilityA remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 11:52 UTC.

CVE Database: Latest Vulnerabilities | Secure.com