BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 11:09 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 56 of 71

  1. Added to KEVMar 3, 2022
    CVE-2011-06118.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Remote Code Execution VulnerabilityAdobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  2. Added to KEVMar 3, 2022
    CVE-2010-33337.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Stack-based Buffer Overflow VulnerabilityA stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  3. Added to KEVMar 3, 2022
    CVE-2010-02327.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Exception Handler VulnerabilityThe kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  4. Added to KEVMar 3, 2022
    CVE-2010-01887.8 HIGH⚡ Known ExploitedAdobe Reader and Acrobat
    Adobe Reader and Acrobat Arbitrary Code Execution VulnerabilityUnspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  5. Added to KEVMar 3, 2022
    CVE-2009-31297.8 HIGH⚡ Known ExploitedMicrosoft Excel
    Microsoft Excel Featheader Record Memory Corruption VulnerabilityMicrosoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  6. Added to KEVMar 3, 2022
    CVE-2009-11237.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Improper Input Validation VulnerabilityThe kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  7. Added to KEVMar 3, 2022
    CVE-2008-34318.8 HIGH⚡ Known ExploitedOracle VirtualBox
    Oracle VirtualBox Insufficient Input Validation VulnerabilityAn input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  8. Added to KEVMar 3, 2022
    CVE-2008-29927.8 HIGH⚡ Known ExploitedAdobe Acrobat and Reader
    Adobe Reader and Acrobat Input Validation VulnerabilityAdobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  9. Added to KEVMar 3, 2022
    CVE-2004-02107.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Escalation VulnerabilityA privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  10. Added to KEVMar 3, 2022
    CVE-2002-03677.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Escalation Vulnerabilitysmss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  11. Added to KEVFeb 25, 2022
    CVE-2022-246826.1 MEDIUM⚡ Known ExploitedSynacor Zimbra Collaborate Suite (ZCS)
    Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilitySynacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.
    ScoreSeverityVersionVector String
    6.1MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  12. Added to KEVFeb 25, 2022
    CVE-2017-85707.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Remote Code Execution VulnerabilityA remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  13. Added to KEVFeb 25, 2022
    CVE-2017-02228.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Remote Code Execution VulnerabilityA remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  14. Added to KEVFeb 25, 2022
    CVE-2014-63527.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Code Injection VulnerabilityMicrosoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  15. Added to KEVFeb 22, 2022
    CVE-2022-231345.3 MEDIUM⚡ Known ExploitedZabbix Frontend
    Zabbix Frontend Improper Access Control VulnerabilityMalicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.
    ScoreSeverityVersionVector String
    5.3MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    3.7LOW3.1CNACVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:P/A:N
  16. Added to KEVFeb 22, 2022
    CVE-2022-231319.8 CRITICAL⚡ Known ExploitedZabbix Frontend
    Zabbix Frontend Authentication Bypass VulnerabilityUnsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.1CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
    5.1MEDIUM2.0NVDAV:N/AC:H/Au:N/C:P/I:P/A:P
  17. Added to KEVFeb 15, 2022
    CVE-2022-240869.8 CRITICAL⚡ Known ExploitedAdobe Commerce and Magento Open Source
    Adobe Commerce and Magento Open Source Improper Input Validation VulnerabilityAdobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  18. Added to KEVFeb 15, 2022
    CVE-2022-06098.8 HIGH⚡ Known ExploitedGoogle Chromium Animation
    Google Chromium Animation Use-After-Free VulnerabilityGoogle Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  19. Added to KEVFeb 15, 2022
    CVE-2019-07527.5 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Type Confusion VulnerabilityA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  20. Added to KEVFeb 15, 2022
    CVE-2018-202507.8 HIGH⚡ Known ExploitedRARLAB WinRAR
    WinRAR Absolute Path Traversal VulnerabilityWinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  21. Added to KEVFeb 15, 2022
    CVE-2018-159827.8 HIGH⚡ Known ExploitedAdobe Flash Player
    Adobe Flash Player Use-After-Free VulnerabilityAdobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  22. Added to KEVFeb 15, 2022
    CVE-2018-81747.5 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityA remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  23. Added to KEVFeb 15, 2022
    CVE-2017-98419.8 CRITICAL⚡ Known ExploitedPHPUnit PHPUnit
    PHPUnit Command Injection VulnerabilityPHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  24. Added to KEVFeb 15, 2022
    CVE-2014-17617.8 HIGH⚡ Known ExploitedMicrosoft Word
    Microsoft Word Memory Corruption VulnerabilityMicrosoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  25. Added to KEVFeb 15, 2022
    CVE-2013-39067.8 HIGH⚡ Known ExploitedMicrosoft Graphics Component
    Microsoft Graphics Component Memory Corruption VulnerabilityMicrosoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 11:40 UTC.

CVE Database: Latest Vulnerabilities | Secure.com