BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 08:46 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 64 of 71

  1. Added to KEVNov 3, 2021
    CVE-2021-200219.8 CRITICAL⚡ Known ExploitedSonicWall SonicWall Email Security
    SonicWall Email Security Improper Privilege Management VulnerabilitySonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20022 and CVE-2021-20023 to achieve privilege escalation.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  2. Added to KEVNov 3, 2021
    CVE-2021-200169.8 CRITICAL⚡ Known ExploitedSonicWall SSLVPN SMA100
    SonicWall SSLVPN SMA100 SQL Injection VulnerabilitySonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated attacker.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  3. Added to KEVNov 3, 2021
    CVE-2021-19066.2 MEDIUM⚡ Known ExploitedQualcomm Multiple Chipsets
    Qualcomm Multiple Chipsets Detection of Error Condition Without Action VulnerabilityMultiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.
    ScoreSeverityVersionVector String
    6.2MEDIUM3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    2.1LOW2.0NVDAV:L/AC:L/Au:N/C:N/I:N/A:P
  4. Added to KEVNov 3, 2021
    CVE-2021-19058.4 HIGH⚡ Known ExploitedQualcomm Multiple Chipsets
    Qualcomm Multiple Chipsets Use-After-Free VulnerabilityMultiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously.
    ScoreSeverityVersionVector String
    8.4HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  5. Added to KEVNov 3, 2021
    CVE-2021-18796.1 MEDIUM⚡ Known ExploitedApple iOS, iPadOS, and watchOS
    Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityApple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    6.1MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  6. Added to KEVNov 3, 2021
    CVE-2021-18719.8 CRITICAL⚡ Known ExploitedApple iOS, iPadOS, and macOS
    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityApple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  7. Added to KEVNov 3, 2021
    CVE-2021-18709.8 CRITICAL⚡ Known ExploitedApple iOS, iPadOS, and macOS
    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityApple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  8. Added to KEVNov 3, 2021
    CVE-2021-17827.0 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Race Condition VulnerabilityApple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.
    ScoreSeverityVersionVector String
    7.0HIGH3.1NVDCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    6.9MEDIUM2.0NVDAV:L/AC:M/Au:N/C:C/I:C/A:C
  9. Added to KEVNov 3, 2021
    CVE-2021-17327.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  10. Added to KEVNov 3, 2021
    CVE-2021-16757.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  11. Added to KEVNov 3, 2021
    CVE-2021-16477.8 HIGH⚡ Known ExploitedMicrosoft Defender
    Microsoft Defender Remote Code Execution VulnerabilityMicrosoft Defender contains an unspecified vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  12. Added to KEVNov 3, 2021
    CVE-2021-14989.8 CRITICAL⚡ Known ExploitedCisco HyperFlex HX
    Cisco HyperFlex HX Data Platform Command Injection VulnerabilityCisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  13. Added to KEVNov 3, 2021
    CVE-2021-14979.8 CRITICAL⚡ Known ExploitedCisco HyperFlex HX
    Cisco HyperFlex HX Installer Virtual Machine Command Injection VulnerabilityCisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  14. Added to KEVNov 3, 2021
    CVE-2020-295839.8 CRITICAL⚡ Known ExploitedZyxel Multiple Products
    Zyxel Multiple Products Use of Hard-Coded Credentials VulnerabilityZyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  15. Added to KEVNov 3, 2021
    CVE-2020-295579.8 CRITICAL⚡ Known ExploitedD-Link DIR-825 R1 Devices
    D-Link DIR-825 R1 Devices Buffer Overflow VulnerabilityD-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  16. Added to KEVNov 3, 2021
    CVE-2020-279505.5 MEDIUM⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Memory Initialization VulnerabilityApple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.
    ScoreSeverityVersionVector String
    5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
    7.1HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:N/A:N
  17. Added to KEVNov 3, 2021
    CVE-2020-279327.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Type Confusion VulnerabilityApple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  18. Added to KEVNov 3, 2021
    CVE-2020-279307.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Memory Corruption VulnerabilityApple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  19. Added to KEVNov 3, 2021
    CVE-2020-269199.8 CRITICAL⚡ Known ExploitedNETGEAR JGS516PE Devices
    Netgear JGS516PE Devices Missing Function Level Access Control VulnerabilityNetgear JGS516PE devices contain a missing function level access control vulnerability.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  20. Added to KEVNov 3, 2021
    CVE-2020-255069.8 CRITICAL⚡ Known ExploitedD-Link DNS-320 Device
    D-Link DNS-320 Device Command Injection VulnerabilityD-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVNov 3, 2021
    CVE-2020-2521310.0 CRITICAL⚡ Known ExploitedWordPress File Manager Plugin
    WordPress File Manager Plugin Remote Code Execution VulnerabilityWordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  22. Added to KEVNov 3, 2021
    CVE-2020-245577.8 HIGH⚡ Known ExploitedTrend Micro Apex One, OfficeScan, and Worry-Free Business Security
    Trend Micro Multiple Products Improper Access Control VulnerabilityTrend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  23. Added to KEVNov 3, 2021
    CVE-2020-175309.8 CRITICAL⚡ Known ExploitedApache Struts
    Apache Struts Remote Code Execution VulnerabilityForced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  24. Added to KEVNov 3, 2021
    CVE-2020-174969.8 CRITICAL⚡ Known ExploitedvBulletin vBulletin
    vBulletin PHP Module Remote Code Execution VulnerabilityThe PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. This CVE ID resolves an incomplete patch for CVE-2019-16759.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  25. Added to KEVNov 3, 2021
    CVE-2020-171448.8 HIGH⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.4HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
    6.0MEDIUM2.0NVDAV:N/AC:M/Au:S/C:P/I:P/A:P

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 09:26 UTC.

CVE Database: Latest Vulnerabilities | Secure.com