CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure Palo Alto Networks Expedition Reported fix guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti CSA (Cloud Services Appliance) Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti CSA (Cloud Services Appliance) Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti CSA (Cloud Services Appliance) Versions & vendor guidance →	Known exploitedCISA KEV	9.4Critical
CVE-2024-8957 PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration PTZOptics PT30X-SDI, PTZOptics PT30X-NDI Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-8956 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication PTZOptics PT30X-SDI, PTZOptics PT30X-NDI Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti CSA (Cloud Services Appliance) Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-8069 Limited remote code execution with privilege of a NetworkService Account access Citrix Session Recording Citrix Session Recording Versions & vendor guidance →	Known exploitedCISA KEV	5.1Medium
CVE-2024-8068 Privilege escalation to NetworkService Account access Citrix Citrix Session Recording Versions & vendor guidance →	Known exploitedCISA KEV	5.1Medium
CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload TeamT5 ThreatSonar Anti-Ransomware Reported fix guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti vTM Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung Electronics MagicINFO 9 Server Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2024-7262 Arbitrary Code Execution in WPS Office Kingsoft WPS Office Reported fix guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2024-6670 WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability Progress Software Corporation WhatsUp Gold Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-6047 GeoVision EOL device - OS Command Injection GeoVision GV_DSP_LPR_V2, GeoVision GV_IPCAMD_GV_BX1500, GeoVision GV_IPCAMD_GV_CB220, GeoVision GV_IPCAMD_GV_EBL1100, GeoVision GV_IPCAMD_GV_EFD1100, GeoVision GV_IPCAMD_GV_FD2410, GeoVision GV_IPCAMD_GV_FD3400, GeoVision GV_IPCAMD_GV_FE3401, GeoVision GV_IPCAMD_GV_FE420, GeoVision GV-VS14_VS14, GeoVision GV_VS03, GeoVision GV_VS2410, GeoVision GV_VS28XX, GeoVision GV_VS216XX, GeoVision GV VS04A, GeoVision GV VS04H, GeoVision GVLX 4 V2, GeoVision GVLX 4 V3, GeoVision GV_IPCAMD_GV_BX130, GeoVision GV_GM8186_VS14 Reported fix guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover Palo Alto Networks Expedition Reported fix guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability yiiframework Yii Versions & vendor guidance →	Known exploitedCISA KEV	9Critical
CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability Advantive VeraCore Versions & vendor guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2024-57728 SimpleHelp Path Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-57727 SimpleHelp Path Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2024-56145 RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms craftcms cms Versions & vendor guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.