BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 09:26 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 63 of 71

  1. Added to KEVNov 3, 2021
    CVE-2021-268559.8 CRITICAL⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    9.1CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  2. Added to KEVNov 3, 2021
    CVE-2021-264118.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    5.1MEDIUM2.0NVDAV:N/AC:H/Au:N/C:P/I:P/A:P
  3. Added to KEVNov 3, 2021
    CVE-2021-260849.8 CRITICAL⚡ Known ExploitedAtlassian Confluence Server and Data Center
    Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection VulnerabilityAtlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  4. Added to KEVNov 3, 2021
    CVE-2021-238748.2 HIGH⚡ Known ExploitedMcAfee McAfee Total Protection (MTP)
    McAfee Total Protection (MTP) Improper Privilege Management VulnerabilityMcAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.
    ScoreSeverityVersionVector String
    8.2HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  5. Added to KEVNov 3, 2021
    CVE-2021-229869.8 CRITICAL⚡ Known ExploitedF5 BIG-IP and BIG-IQ Centralized Management
    F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityF5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  6. Added to KEVNov 3, 2021
    CVE-2021-229007.2 HIGH⚡ Known ExploitedIvanti Pulse Connect Secure
    Ivanti Pulse Connect Secure Unrestricted File Upload VulnerabilityIvanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
    ScoreSeverityVersionVector String
    7.2HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  7. Added to KEVNov 3, 2021
    CVE-2021-228998.8 HIGH⚡ Known ExploitedIvanti Pulse Connect Secure
    Ivanti Pulse Connect Secure Command Injection VulnerabilityIvanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  8. Added to KEVNov 3, 2021
    CVE-2021-228948.8 HIGH⚡ Known ExploitedIvanti Pulse Connect Secure
    Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow VulnerabilityIvanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  9. Added to KEVNov 3, 2021
    CVE-2021-2289310.0 CRITICAL⚡ Known ExploitedIvanti Pulse Connect Secure
    Ivanti Pulse Connect Secure Use-After-Free VulnerabilityIvanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  10. Added to KEVNov 3, 2021
    CVE-2021-225067.5 HIGH⚡ Known ExploitedMicro Focus Micro Focus Access Manager
    Micro Focus Access Manager Information Leakage VulnerabilityMicro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  11. Added to KEVNov 3, 2021
    CVE-2021-225029.8 CRITICAL⚡ Known ExploitedMicro Focus Operation Bridge Reporter (OBR)
    Micro Focus Operation Bridge Report (OBR) Remote Code Execution VulnerabilityMicro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  12. Added to KEVNov 3, 2021
    CVE-2021-2220510.0 CRITICAL⚡ Known ExploitedGitLab Community and Enterprise Editions
    GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityGitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  13. Added to KEVNov 3, 2021
    CVE-2021-220059.8 CRITICAL⚡ Known ExploitedVMware vCenter Server
    VMware vCenter Server File Upload VulnerabilityVMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  14. Added to KEVNov 3, 2021
    CVE-2021-219859.8 CRITICAL⚡ Known ExploitedVMware vCenter Server
    VMware vCenter Server Improper Input Validation VulnerabilityVMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  15. Added to KEVNov 3, 2021
    CVE-2021-219729.8 CRITICAL⚡ Known ExploitedVMware vCenter Server
    VMware vCenter Server Remote Code Execution VulnerabilityVMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  16. Added to KEVNov 3, 2021
    CVE-2021-212248.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Type Confusion VulnerabilityGoogle Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  17. Added to KEVNov 3, 2021
    CVE-2021-212208.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Improper Input Validation VulnerabilityGoogle Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  18. Added to KEVNov 3, 2021
    CVE-2021-212068.8 HIGH⚡ Known ExploitedGoogle Chromium Blink
    Google Chromium Blink Use-After-Free VulnerabilityGoogle Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  19. Added to KEVNov 3, 2021
    CVE-2021-211938.8 HIGH⚡ Known ExploitedGoogle Chromium Blink
    Google Chromium Blink Use-After-Free VulnerabilityGoogle Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  20. Added to KEVNov 3, 2021
    CVE-2021-211668.8 HIGH⚡ Known ExploitedGoogle Chromium
    Google Chromium Race Condition VulnerabilityGoogle Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  21. Added to KEVNov 3, 2021
    CVE-2021-211488.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Heap Buffer Overflow VulnerabilityGoogle Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  22. Added to KEVNov 3, 2021
    CVE-2021-210178.8 HIGH⚡ Known ExploitedAdobe Acrobat and Reader
    Adobe Acrobat and Reader Heap-based Buffer Overflow VulnerabilityAcrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  23. Added to KEVNov 3, 2021
    CVE-2021-200909.8 CRITICAL⚡ Known ExploitedArcadyan Buffalo Firmware
    Arcadyan Buffalo Firmware Path Traversal VulnerabilityArcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass authentication and access sensitive information. This vulnerability affects multiple routers across several different vendors.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  24. Added to KEVNov 3, 2021
    CVE-2021-200234.9 MEDIUM⚡ Known ExploitedSonicWall SonicWall Email Security
    SonicWall Email Security Path Traversal VulnerabilitySonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20022 to achieve privilege escalation.
    ScoreSeverityVersionVector String
    4.9MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
    4.0MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:N/A:N
  25. Added to KEVNov 3, 2021
    CVE-2021-200227.2 HIGH⚡ Known ExploitedSonicWall SonicWall Email Security
    SonicWall Email Security Unrestricted Upload of File VulnerabilitySonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated attacker to upload a file to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20021 and CVE-2021-20023 to achieve privilege escalation.
    ScoreSeverityVersionVector String
    7.2HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 09:41 UTC.

CVE Database: Latest Vulnerabilities | Secure.com