BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 07:44 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 68 of 71

  1. Added to KEVNov 3, 2021
    CVE-2020-06837.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Installer Privilege Escalation VulnerabilityMicrosoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  2. Added to KEVNov 3, 2021
    CVE-2020-06747.5 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  3. Added to KEVNov 3, 2021
    CVE-2020-06469.8 CRITICAL⚡ Known ExploitedMicrosoft .NET Framework
    Microsoft .NET Framework Remote Code Execution VulnerabilityMicrosoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  4. Added to KEVNov 3, 2021
    CVE-2020-06018.1 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows CryptoAPI Spoofing VulnerabilityMicrosoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software. The vulnerability is also known under the moniker of CurveBall.
    ScoreSeverityVersionVector String
    8.1HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
    5.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:N
  5. Added to KEVNov 3, 2021
    CVE-2020-00697.8 HIGH⚡ Known ExploitedMediaTek Multiple Chipsets
    Mediatek Multiple Chipsets Insufficient Input Validation VulnerabilityMultiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain "AbstractEmu."
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  6. Added to KEVNov 3, 2021
    CVE-2020-00417.8 HIGH⚡ Known ExploitedAndroid Android Kernel
    Android Kernel Out-of-Bounds Write VulnerabilityAndroid Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  7. Added to KEVNov 3, 2021
    CVE-2019-200857.5 HIGH⚡ Known ExploitedTVT NVMS-1000
    TVT NVMS-1000 Directory Traversal VulnerabilityTVT devices utilizing NVMS-1000 software contain a directory traversal vulnerability via GET /.. requests.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  8. Added to KEVNov 3, 2021
    CVE-2019-197819.8 CRITICAL⚡ Known ExploitedCitrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityCitrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  9. Added to KEVNov 3, 2021
    CVE-2019-193567.5 HIGH⚡ Known ExploitedNetis WF2419 Devices
    Netis WF2419 Devices Remote Code Execution VulnerabilityNetis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    8.5HIGH2.0NVDAV:N/AC:M/Au:S/C:C/I:C/A:C
  10. Added to KEVNov 3, 2021
    CVE-2019-189887.0 HIGH⚡ Known ExploitedTeamViewer Desktop
    TeamViewer Desktop Bypass Remote Login VulnerabilityTeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system).
    ScoreSeverityVersionVector String
    7.0HIGH3.1NVDCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.4MEDIUM2.0NVDAV:L/AC:M/Au:N/C:P/I:P/A:P
  11. Added to KEVNov 3, 2021
    CVE-2019-189359.8 CRITICAL⚡ Known ExploitedProgress Telerik UI for ASP.NET AJAX
    Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityProgress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  12. Added to KEVNov 3, 2021
    CVE-2019-181878.8 HIGH⚡ Known ExploitedTrend Micro OfficeScan
    Trend Micro OfficeScan Directory Traversal VulnerabilityTrend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  13. Added to KEVNov 3, 2021
    CVE-2019-175587.5 HIGH⚡ Known ExploitedApache Solr
    Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityThe Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:N/AC:H/Au:S/C:P/I:P/A:P
  14. Added to KEVNov 3, 2021
    CVE-2019-170268.8 HIGH⚡ Known ExploitedMozilla Firefox and Thunderbird
    Mozilla Firefox And Thunderbird Type Confusion VulnerabilityMozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  15. Added to KEVNov 3, 2021
    CVE-2019-167599.8 CRITICAL⚡ Known ExploitedvBulletin vBulletin
    vBulletin PHP Module Remote Code Execution VulnerabilityThe PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  16. Added to KEVNov 3, 2021
    CVE-2019-162569.8 CRITICAL⚡ Known ExploitedSIMalliance Toolbox Browser
    SIMalliance Toolbox Browser Command Injection VulnerabilitySIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI information or execute a range of other attacks by modifying the attack message.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  17. Added to KEVNov 3, 2021
    CVE-2019-159498.8 HIGH⚡ Known ExploitedNagios Nagios XI
    Nagios XI Remote Code Execution VulnerabilityNagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  18. Added to KEVNov 3, 2021
    CVE-2019-157527.8 HIGH⚡ Known ExploitedDocker Desktop Community Edition
    Docker Desktop Community Edition Privilege Escalation VulnerabilityDocker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  19. Added to KEVNov 3, 2021
    CVE-2019-136087.5 HIGH⚡ Known ExploitedCitrix StoreFront Server
    Citrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityCitrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  20. Added to KEVNov 3, 2021
    CVE-2019-116349.8 CRITICAL⚡ Known ExploitedCitrix Workspace Application and Receiver for Windows
    Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityCitrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVNov 3, 2021
    CVE-2019-115809.8 CRITICAL⚡ Known ExploitedAtlassian Crowd and Crowd Data Center
    Atlassian Crowd and Crowd Data Center Remote Code Execution VulnerabilityAtlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  22. Added to KEVNov 3, 2021
    CVE-2019-115397.2 HIGH⚡ Known ExploitedIvanti Pulse Connect Secure and Pulse Policy Secure
    Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityIvanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.
    ScoreSeverityVersionVector String
    7.2HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    8.0HIGH3.0CNACVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
    6.5MEDIUM2.0NVDAV:N/AC:L/Au:S/C:P/I:P/A:P
  23. Added to KEVNov 3, 2021
    CVE-2019-1151010.0 CRITICAL⚡ Known ExploitedIvanti Pulse Connect Secure
    Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityIvanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    9.9CRITICAL3.0CNACVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  24. Added to KEVNov 3, 2021
    CVE-2019-99786.1 MEDIUM⚡ Known ExploitedWordPress Social Warfare Plugin
    WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityWordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.
    ScoreSeverityVersionVector String
    6.1MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  25. Added to KEVNov 3, 2021
    CVE-2019-90828.8 HIGH⚡ Known ExploitedThinkPHP ThinkPHP
    ThinkPHP Remote Code Execution VulnerabilityThinkPHP contains an unspecified vulnerability that allows for remote code execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 08:12 UTC.

CVE Database: Latest Vulnerabilities | Secure.com