BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 08:12 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 69 of 71

  1. Added to KEVNov 3, 2021
    CVE-2019-83947.5 HIGH⚡ Known ExploitedZoho ManageEngine
    Zoho ManageEngine ServiceDesk Plus (SDP) File Upload VulnerabilityZoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.
    ScoreSeverityVersionVector String
    7.5HIGH3.1CISA-ADPCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    6.5MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
    4.0MEDIUM2.0NVDAV:N/AC:L/Au:S/C:N/I:P/A:N
  2. Added to KEVNov 3, 2021
    CVE-2019-74817.5 HIGH⚡ Known ExploitedSonicWall SMA100
    SonicWall SMA100 SQL Injection VulnerabilitySonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  3. Added to KEVNov 3, 2021
    CVE-2019-62237.5 HIGH⚡ Known ExploitedApple iOS and macOS
    Apple iOS and macOS Group Facetime VulnerabilityApple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  4. Added to KEVNov 3, 2021
    CVE-2019-55916.5 MEDIUM⚡ Known ExploitedFortinet FortiOS
    Fortinet FortiOS Default Configuration VulnerabilityFortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.
    ScoreSeverityVersionVector String
    6.5MEDIUM3.1NVDCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    3.3LOW2.0NVDAV:A/AC:L/Au:N/C:P/I:N/A:N
  5. Added to KEVNov 3, 2021
    CVE-2019-55449.8 CRITICAL⚡ Known ExploitedVMware VMware ESXi and Horizon DaaS
    VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityVMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  6. Added to KEVNov 3, 2021
    CVE-2019-47169.8 CRITICAL⚡ Known ExploitedIBM Planning Analytics
    IBM Planning Analytics Remote Code Execution VulnerabilityIBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0CRITICAL3.0CNACVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  7. Added to KEVNov 3, 2021
    CVE-2019-33988.8 HIGH⚡ Known ExploitedAtlassian Confluence Server and Data Center
    Atlassian Confluence Server and Data Center Path Traversal VulnerabilityAtlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  8. Added to KEVNov 3, 2021
    CVE-2019-33969.8 CRITICAL⚡ Known ExploitedAtlassian Confluence Server and Data Server
    Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityAtlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  9. Added to KEVNov 3, 2021
    CVE-2019-22157.8 HIGH⚡ Known ExploitedAndroid Android Kernel
    Android Kernel Use-After-Free VulnerabilityAndroid Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  10. Added to KEVNov 3, 2021
    CVE-2019-16537.5 HIGH⚡ Known ExploitedCisco Small Business RV320 and RV325 Routers
    Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityCisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    7.5HIGH3.0CNACVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  11. Added to KEVNov 3, 2021
    CVE-2019-14297.5 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  12. Added to KEVNov 3, 2021
    CVE-2019-13677.5 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  13. Added to KEVNov 3, 2021
    CVE-2019-12157.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Escalation VulnerabilityMicrosoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  14. Added to KEVNov 3, 2021
    CVE-2019-12147.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Privilege Common Log File System (CLFS) Escalation VulnerabilityMicrosoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  15. Added to KEVNov 3, 2021
    CVE-2019-08637.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Error Reporting (WER) Privilege Escalation VulnerabilityMicrosoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  16. Added to KEVNov 3, 2021
    CVE-2019-08597.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  17. Added to KEVNov 3, 2021
    CVE-2019-08087.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  18. Added to KEVNov 3, 2021
    CVE-2019-08037.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  19. Added to KEVNov 3, 2021
    CVE-2019-07977.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVNov 3, 2021
    CVE-2019-07089.8 CRITICAL⚡ Known ExploitedMicrosoft Remote Desktop Services
    Microsoft Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  21. Added to KEVNov 3, 2021
    CVE-2019-06049.8 CRITICAL⚡ Known ExploitedMicrosoft SharePoint
    Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  22. Added to KEVNov 3, 2021
    CVE-2019-05418.8 HIGH⚡ Known ExploitedMicrosoft MSHTML
    Microsoft MSHTML Remote Code Execution VulnerabilityMicrosoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C
  23. Added to KEVNov 3, 2021
    CVE-2019-02117.8 HIGH⚡ Known ExploitedApache HTTP Server
    Apache HTTP Server Privilege Escalation VulnerabilityApache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  24. Added to KEVNov 3, 2021
    CVE-2018-200629.8 CRITICAL⚡ Known ExploitedThinkPHP noneCms
    ThinkPHP "noneCms" Remote Code Execution VulnerabilityThinkPHP "noneCms" contains an unspecified vulnerability that allows for remote code execution through crafted use of the filter parameter.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  25. Added to KEVNov 3, 2021
    CVE-2018-183257.5 HIGH⚡ Known ExploitedDotNetNuke (DNN) DotNetNuke (DNN)
    DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityDotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 08:12 UTC.

CVE Database: Latest Vulnerabilities | Secure.com