CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2023-49105 ownCloud Improper Authentication Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet FortiClientEMS Reported fix guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Google Chrome, Google libwebp Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.6Critical
CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-47565 Legacy VioStor NVR QNAP Systems Inc. VioStor NVR Reported fix guidance →	Known exploitedCISA KEV	8High
CVE-2023-47246 SysAid Server Path Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti ICS, Ivanti IPS Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2023-46748 BIG-IP Configuration utility authenticated SQL injection vulnerability F5 BIG-IP Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability F5 BIG-IP Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-46604 Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack Apache Software Foundation Apache ActiveMQ, Apache Software Foundation Apache ActiveMQ Legacy OpenWire Module Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid Corporation Proself Enterprise/Standard Edition, North Grid Corporation Proself Gateway Edition, North Grid Corporation Proself Mail Sanitize Edition Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis Acronis Cyber Infrastructure Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability KNX Association KNX Protocol Connection Authorization Option 1 Reported workaround →	Known exploitedCISA KEV	7.5High
CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability Apple macOS, Apple iOS and iPadOS, Apple Safari Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability Apple Safari, Apple macOS, Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple Safari, Apple macOS, Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability Apple iOS and iPadOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability JetBrains TeamCity Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-4211 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.