BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 10:08 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 61 of 71

  1. Added to KEVNov 3, 2021
    CVE-2021-354649.8 CRITICAL⚡ Known ExploitedForgeRock Access Management (AM)
    ForgeRock Access Management (AM) Core Server Remote Code Execution VulnerabilityForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  2. Added to KEVNov 3, 2021
    CVE-2021-353959.8 CRITICAL⚡ Known ExploitedRealtek AP-Router SDK
    Realtek AP-Router SDK Buffer Overflow VulnerabilityRealtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  3. Added to KEVNov 3, 2021
    CVE-2021-3521110.0 CRITICAL⚡ Known ExploitedSolarWinds Serv-U
    SolarWinds Serv-U Remote Code Execution VulnerabilitySolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    9.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  4. Added to KEVNov 3, 2021
    CVE-2021-345278.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  5. Added to KEVNov 3, 2021
    CVE-2021-345239.8 CRITICAL⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Privilege Escalation VulnerabilityMicrosoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.0CRITICAL3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  6. Added to KEVNov 3, 2021
    CVE-2021-344739.8 CRITICAL⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.1CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  7. Added to KEVNov 3, 2021
    CVE-2021-344488.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM3.1CNACVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  8. Added to KEVNov 3, 2021
    CVE-2021-337717.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Privilege Escalation VulnerabilityMicrosoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  9. Added to KEVNov 3, 2021
    CVE-2021-337428.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.5HIGH3.1CNACVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  10. Added to KEVNov 3, 2021
    CVE-2021-337398.4 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityMicrosoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    8.4HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  11. Added to KEVNov 3, 2021
    CVE-2021-319797.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Privilege Escalation VulnerabilityMicrosoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  12. Added to KEVNov 3, 2021
    CVE-2021-319567.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows NTFS Privilege Escalation VulnerabilityMicrosoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  13. Added to KEVNov 3, 2021
    CVE-2021-319555.5 MEDIUM⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.
    ScoreSeverityVersionVector String
    5.5MEDIUM3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    2.1LOW2.0NVDAV:L/AC:L/Au:N/C:P/I:N/A:N
  14. Added to KEVNov 3, 2021
    CVE-2021-317559.8 CRITICAL⚡ Known ExploitedTenda AC11 Router
    Tenda AC11 Router Stack Buffer Overflow VulnerabilityTenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  15. Added to KEVNov 3, 2021
    CVE-2021-312076.6 MEDIUM⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Security Feature Bypass VulnerabilityMicrosoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.
    ScoreSeverityVersionVector String
    6.6MEDIUM3.1CNACVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  16. Added to KEVNov 3, 2021
    CVE-2021-312017.8 HIGH⚡ Known ExploitedMicrosoft Enhanced Cryptographic Provider
    Microsoft Enhanced Cryptographic Provider Privilege Escalation VulnerabilityMicrosoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    5.2MEDIUM3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  17. Added to KEVNov 3, 2021
    CVE-2021-311997.8 HIGH⚡ Known ExploitedMicrosoft Enhanced Cryptographic Provider
    Microsoft Enhanced Cryptographic Provider Privilege Escalation VulnerabilityMicrosoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    5.2MEDIUM3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  18. Added to KEVNov 3, 2021
    CVE-2021-308697.8 HIGH⚡ Known ExploitedApple iOS, iPadOS, and macOS
    Apple iOS, iPadOS, and macOS Type Confusion VulnerabilityApple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  19. Added to KEVNov 3, 2021
    CVE-2021-308607.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Integer Overflow VulnerabilityApple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  20. Added to KEVNov 3, 2021
    CVE-2021-308588.8 HIGH⚡ Known ExploitedApple iOS, iPadOS, and macOS
    Apple iOS, iPadOS, macOS Use-After-Free VulnerabilityApple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  21. Added to KEVNov 3, 2021
    CVE-2021-308077.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Memory Corruption VulnerabilityApple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  22. Added to KEVNov 3, 2021
    CVE-2021-307628.8 HIGH⚡ Known ExploitedApple iOS
    Apple iOS WebKit Use-After-Free VulnerabilityApple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  23. Added to KEVNov 3, 2021
    CVE-2021-307618.8 HIGH⚡ Known ExploitedApple iOS
    Apple iOS WebKit Memory Corruption VulnerabilityApple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  24. Added to KEVNov 3, 2021
    CVE-2021-307137.8 HIGH⚡ Known ExploitedApple macOS
    Apple macOS Unspecified VulnerabilityApple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  25. Added to KEVNov 3, 2021
    CVE-2021-306668.8 HIGH⚡ Known ExploitedApple iOS
    Apple iOS WebKit Buffer Overflow VulnerabilityApple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 10:34 UTC.

CVE Database: Latest Vulnerabilities | Secure.com