CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2024-12686Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA) Versions & vendor guidance → |
Known exploitedCISA KEV | 6.6Medium |
| CVE-2024-12356Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) BeyondTrust Remote Support, BeyondTrust Privileged Remote Access Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-1212LoadMaster Pre-Authenticated OS Command Injection Progress Software LoadMaster Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2024-11680ProjectSend Unauthenticated Configuration Modification ProjectSend ProjectSend Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-11667Zyxel Multiple Firewalls Path Traversal Vulnerability Zyxel ATP series firmware, Zyxel USG FLEX series firmware, Zyxel USG FLEX 50(W) series firmware, Zyxel USG20(W)-VPN series firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2024-11182Stored XSS vulnerability in MDaemon Email Server MDaemon Email Server Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2024-11120GeoVision EOL devices - OS Command Injection GeoVision GV-VS12, GeoVision GV-VS11, GeoVision GV-DSP_LPR_V3, GeoVision GVLX 4 V2, GeoVision GVLX 4 V3 Reported fix guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2024-1086Use-after-free in Linux kernel's netfilter: nf_tables component Linux Kernel Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2024-0769D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal D-Link DIR-859 Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2024-0519Google Chromium V8 Out-of-Bounds Memory Access Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2024-0012PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2023-7101Arbitrary Code Execution (ACE) Vulnerability Douglas Wilson Spreadsheet::ParseExcel Reported fix guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2023-7028Weak Password Recovery Mechanism for Forgotten Password in GitLab GitLab GitLab Reported fix guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2023-7024Google Chromium WebRTC Heap Buffer Overflow Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-6549Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Cloud Software Group NetScaler ADC Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2023-6548Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Cloud Software Group NetScaler ADC, Cloud Software Group NetScaler Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2023-6448Unitronics VisiLogic uses a default administrative password Unitronics VisiLogic Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2023-6345Google Skia Integer Overflow Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2023-5631Stored XSS vulnerability in Roundcube Roundcube Roundcubemail Versions & vendor guidance → |
Known exploitedCISA KEV | 6.1Medium |
| CVE-2023-5217Google Chromium libvpx Heap Buffer Overflow Vulnerability Google Chrome, Google libvpx Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-52163Digiever DS-2105 Pro Missing Authorization Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-50224TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability TP-Link TL-WR841N, TP-Link TL-WR841ND, TP-Link TL-MR6400, TP-Link Archer C5, TP-Link Archer C7, TP-Link TL-WDR3600, TP-Link TL-WDR4300, TP-Link TL-WDR3500, TP-Link TL-WR740N, TP-Link TL-WR741ND, TP-Link TL-WR749N, TP-Link TL-MR3420, TP-Link TL-WR1043ND, TP-Link TL-WR1045ND, TP-Link TL-WR840N, TP-Link TL-WR842N, TP-Link TL-WR842ND, TP-Link TL-WR845N, TP-Link TL-WR941ND, TP-Link TL-WR945N, TP-Link TL-WA801ND, TP-Link TL-WA901ND Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2023-49897FXC AE1021, AE1021PE OS Command Injection Vulnerability FXC Inc. AE1021PE, FXC Inc. AE1021 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2023-4966Unauthenticated sensitive information disclosure Citrix NetScaler ADC, Citrix NetScaler Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 9.4Critical |
| CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalation , Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Red Hat Enterprise Linux 9, Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 6, Red Hat Red Hat Enterprise Linux 7 Reported workaround → |
Known exploitedCISA KEV | 7.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.