CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2025-20337 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Cisco Cisco Identity Services Engine Software, Cisco Cisco ISE Passive Identity Connector Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Cisco Secure Firewall Threat Defense (FTD) Software Versions & vendor guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2025-20281 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Cisco Cisco Identity Services Engine Software Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2025-1976 Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 Brocade Fabric OS Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2025-15556 Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification notepad-plus-plus notepad-plus-plus Versions & vendor guidance →	Known exploitedCISA KEV	7.7High
CVE-2025-14847 Zlib compressed protocol header length confusion may allow memory read MongoDB Inc. MongoDB Server Versions & vendor guidance →	Known exploitedCISA KEV	8.7High
CVE-2025-14733 WatchGuard Firebox iked Out of Bounds Write Vulnerability WatchGuard Fireware OS Reported fix guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2025-14611 Gladinet CentreStack and TrioFox Hard Coded AES Keys Gladinet CentreStack and TrioFox Versions & vendor guidance →	Known exploitedCISA KEV	7.1High
CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Edimax IC-7100 IP Camera Reported workaround →	Known exploitedCISA KEV	9.3Critical
CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability TrioFox TrioFox Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests React Native Community CLI Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2025-11371 Gladinet CentreStack and TrioFox Local File Inclusion Flaw Gladinet CentreStack and TrioFox Reported workaround →	Known exploitedCISA KEV	7.5High
CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2025-10035 Deserialization Vulnerability in GoAnywhere MFT's License Servlet Fortra GoAnywhere MFT Reported fix guidance →	Known exploitedCISA KEV	10Critical
CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability Trimble Cityworks, Trimble Cityworks (with office companion) Reported fix guidance →	Known exploitedCISA KEV	8.6High
CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability 7-Zip 7-Zip Versions & vendor guidance →	Known exploitedCISA KEV	7High
CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti Connect Secure, Ivanti Policy Secure, Ivanti Neurons for ZTA gateways Versions & vendor guidance →	Known exploitedCISA KEV	9Critical
CVE-2025-0111 PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance →	Known exploitedCISA KEV	7.1High
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance →	Known exploitedCISA KEV	8.8High
CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-9537 ScienceLogic SL1 unspecified vulnerability ScienceLogic SL1 Versions & vendor guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance →	Known exploitedCISA KEV	6.9Medium
CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure Palo Alto Networks Expedition Reported fix guidance →	Known exploitedCISA KEV	9.2Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.