BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 10:41 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 60 of 71

  1. Added to KEVDec 1, 2021
    CVE-2020-112617.8 HIGH⚡ Known ExploitedQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
    Qualcomm Multiple Chipsets Improper Input Validation VulnerabilityMemory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  2. Added to KEVDec 1, 2021
    CVE-2018-148479.1 CRITICAL⚡ Known ExploitedMikroTik RouterOS
    MikroTik Router OS Directory Traversal VulnerabilityMikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
    ScoreSeverityVersionVector String
    9.1CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
    6.4MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:N
  3. Added to KEVNov 17, 2021
    CVE-2021-423218.8 HIGH⚡ Known ExploitedMicrosoft Exchange
    Microsoft Exchange Server Remote Code Execution VulnerabilityAn authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  4. Added to KEVNov 17, 2021
    CVE-2021-422927.8 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Excel Security Feature BypassA security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  5. Added to KEVNov 17, 2021
    CVE-2021-404497.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Win32k Privilege Escalation VulnerabilityUnspecified vulnerability allows for an authenticated user to escalate privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  6. Added to KEVNov 17, 2021
    CVE-2021-222047.8 HIGH⚡ Known ExploitedPerl Exiftool
    ExifTool Remote Code Execution VulnerabilityImproper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  7. Added to KEVNov 3, 2021
    CVE-2021-422589.8 CRITICAL⚡ Known ExploitedBQE BillQuick Web Suite
    BQE BillQuick Web Suite SQL Injection VulnerabilityBQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  8. Added to KEVNov 3, 2021
    CVE-2021-420139.8 CRITICAL⚡ Known ExploitedApache HTTP Server
    Apache HTTP Server Path Traversal VulnerabilityApache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  9. Added to KEVNov 3, 2021
    CVE-2021-417739.8 CRITICAL⚡ Known ExploitedApache HTTP Server
    Apache HTTP Server Path Traversal VulnerabilityApache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  10. Added to KEVNov 3, 2021
    CVE-2021-405399.8 CRITICAL⚡ Known ExploitedZoho ManageEngine
    Zoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityZoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  11. Added to KEVNov 3, 2021
    CVE-2021-404448.8 HIGH⚡ Known ExploitedMicrosoft MSHTML
    Microsoft MSHTML Remote Code Execution VulnerabilityMicrosoft MSHTML contains a unspecified vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  12. Added to KEVNov 3, 2021
    CVE-2021-386497.8 HIGH⚡ Known ExploitedMicrosoft Open Management Infrastructure (OMI)
    Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityMicrosoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.0HIGH3.1CNACVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  13. Added to KEVNov 3, 2021
    CVE-2021-386487.8 HIGH⚡ Known ExploitedMicrosoft Open Management Infrastructure (OMI)
    Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityMicrosoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  14. Added to KEVNov 3, 2021
    CVE-2021-386479.8 CRITICAL⚡ Known ExploitedMicrosoft Open Management Infrastructure (OMI)
    Microsoft Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityMicrosoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  15. Added to KEVNov 3, 2021
    CVE-2021-386457.8 HIGH⚡ Known ExploitedMicrosoft Open Management Infrastructure (OMI)
    Microsoft Open Management Infrastructure (OMI) Privilege Escalation VulnerabilityMicrosoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  16. Added to KEVNov 3, 2021
    CVE-2021-380038.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Memory Corruption VulnerabilityGoogle Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  17. Added to KEVNov 3, 2021
    CVE-2021-380006.1 MEDIUM⚡ Known ExploitedGoogle Chromium Intents
    Google Chromium Intents Improper Input Validation VulnerabilityGoogle Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    6.1MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    5.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:N
  18. Added to KEVNov 3, 2021
    CVE-2021-379766.5 MEDIUM⚡ Known ExploitedGoogle Chromium
    Google Chromium Information Disclosure VulnerabilityGoogle Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:N/A:N
  19. Added to KEVNov 3, 2021
    CVE-2021-379758.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Use-After-Free VulnerabilityGoogle Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  20. Added to KEVNov 3, 2021
    CVE-2021-379739.6 CRITICAL⚡ Known ExploitedGoogle Chromium Portals
    Google Chromium Portals Use-After-Free VulnerabilityGoogle Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.
    ScoreSeverityVersionVector String
    9.6CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  21. Added to KEVNov 3, 2021
    CVE-2021-369557.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityMicrosoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  22. Added to KEVNov 3, 2021
    CVE-2021-369487.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Update Medic Service Privilege Escalation VulnerabilityMicrosoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  23. Added to KEVNov 3, 2021
    CVE-2021-369427.5 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Local Security Authority (LSA) Spoofing VulnerabilityMicrosoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
    ScoreSeverityVersionVector String
    7.5HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:N/I:P/A:N
  24. Added to KEVNov 3, 2021
    CVE-2021-367427.8 HIGH⚡ Known ExploitedTrend Micro Apex One, Apex One as a Service, and Worry-Free Business Security
    Trend Micro Multiple Products Improper Input Validation VulnerabilityTrend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  25. Added to KEVNov 3, 2021
    CVE-2021-367418.8 HIGH⚡ Known ExploitedTrend Micro Apex One, Apex One as a Service, and Worry-Free Business Security
    Trend Micro Multiple Products Improper Input Validation VulnerabilityTrend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 10:48 UTC.

CVE Database: Latest Vulnerabilities | Secure.com