BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 10:41 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 57 of 71

  1. Added to KEVFeb 11, 2022
    CVE-2022-226208.8 HIGH⚡ Known ExploitedApple iOS, iPadOS, and macOS
    Apple iOS, iPadOS, and macOS Webkit Use-After-Free VulnerabilityApple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  2. Added to KEVFeb 10, 2022
    CVE-2021-369347.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows SAM Local Privilege Escalation VulnerabilityIf a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  3. Added to KEVFeb 10, 2022
    CVE-2020-079610.0 CRITICAL⚡ Known ExploitedMicrosoft SMBv3
    Microsoft SMBv3 Remote Code Execution VulnerabilityA remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  4. Added to KEVFeb 10, 2022
    CVE-2018-10008619.8 CRITICAL⚡ Known ExploitedJenkins Jenkins Stapler Web Framework
    Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityA code execution vulnerability exists in the Stapler web framework used by Jenkins
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  5. Added to KEVFeb 10, 2022
    CVE-2017-102717.5 HIGH⚡ Known ExploitedOracle WebLogic Server
    Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityOracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:N/A:P
  6. Added to KEVFeb 10, 2022
    CVE-2017-97919.8 CRITICAL⚡ Known ExploitedApache Struts 1
    Apache Struts 1 Improper Input Validation VulnerabilityThe Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  7. Added to KEVFeb 10, 2022
    CVE-2017-84648.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Shell (.lnk) Remote Code Execution VulnerabilityWindows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  8. Added to KEVFeb 10, 2022
    CVE-2017-02637.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  9. Added to KEVFeb 10, 2022
    CVE-2017-02627.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Remote Code Execution VulnerabilityA remote code execution vulnerability exists in Microsoft Office.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  10. Added to KEVFeb 10, 2022
    CVE-2017-01458.8 HIGH⚡ Known ExploitedMicrosoft SMBv1
    Microsoft SMBv1 Remote Code Execution VulnerabilityThe SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  11. Added to KEVFeb 10, 2022
    CVE-2017-01448.8 HIGH⚡ Known ExploitedMicrosoft SMBv1
    Microsoft SMBv1 Remote Code Execution VulnerabilityThe SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  12. Added to KEVFeb 10, 2022
    CVE-2016-30889.8 CRITICAL⚡ Known ExploitedApache ActiveMQ
    Apache ActiveMQ Improper Input Validation VulnerabilityThe Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  13. Added to KEVFeb 10, 2022
    CVE-2015-20518.8 HIGH⚡ Known ExploitedD-Link DIR-645 Router
    D-Link DIR-645 Router Remote Code Execution VulnerabilityD-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  14. Added to KEVFeb 10, 2022
    CVE-2015-16359.8 CRITICAL⚡ Known ExploitedMicrosoft HTTP.sys
    Microsoft HTTP.sys Remote Code Execution VulnerabilityMicrosoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  15. Added to KEVFeb 10, 2022
    CVE-2015-11307.8 HIGH⚡ Known ExploitedApple OS X
    Apple OS X Authentication Bypass VulnerabilityThe XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  16. Added to KEVFeb 10, 2022
    CVE-2014-44047.8 HIGH⚡ Known ExploitedApple OS X
    Apple OS X Heap-Based Buffer Overflow VulnerabilityHeap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  17. Added to KEVFeb 4, 2022
    CVE-2022-218827.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.0HIGH3.1CNACVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  18. Added to KEVJan 28, 2022
    CVE-2022-225879.8 CRITICAL⚡ Known ExploitedApple iOS and macOS
    Apple Memory Corruption VulnerabilityApple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVJan 28, 2022
    CVE-2021-200389.8 CRITICAL⚡ Known ExploitedSonicWall SMA 100 Appliances
    SonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilitySonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  20. Added to KEVJan 28, 2022
    CVE-2020-57229.8 CRITICAL⚡ Known ExploitedGrandstream UCM6200
    Grandstream Networks UCM6200 Series SQL Injection VulnerabilityGrandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  21. Added to KEVJan 28, 2022
    CVE-2020-07877.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management VulnerabilityMicrosoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  22. Added to KEVJan 28, 2022
    CVE-2017-56899.8 CRITICAL⚡ Known ExploitedIntel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
    Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation VulnerabilityIntel products contain a vulnerability which can allow attackers to perform privilege escalation.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  23. Added to KEVJan 28, 2022
    CVE-2014-71699.8 CRITICAL⚡ Known ExploitedGNU Bourne-Again Shell (Bash)
    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityGNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  24. Added to KEVJan 28, 2022
    CVE-2014-62719.8 CRITICAL⚡ Known ExploitedGNU Bourne-Again Shell (Bash)
    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityGNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  25. Added to KEVJan 28, 2022
    CVE-2014-17769.8 CRITICAL⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 11:31 UTC.

CVE Database: Latest Vulnerabilities | Secure.com