CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-9082 ThinkPHP Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-8720 WebKitGTK Memory Corruption Vulnerability n/a webkitgtk Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-8605 Apple Multiple Products Use-After-Free Vulnerability Apple iOS, Apple macOS, Apple tvOS, Apple watchOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-8526 Apple macOS Use-After-Free Vulnerability Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-8506 Apple Multiple Products Type Confusion Vulnerability Apple iOS, Apple tvOS, Apple watchOS, Apple Safari, Apple iTunes for Windows, Apple iCloud for Windows Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-8394 Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-7609 Kibana Arbitrary Code Execution Elastic Kibana Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability SonicWall SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability SonicWall SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-7287 Apple iOS Memory Corruption Vulnerability Apple iOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-7286 Apple Multiple Products Memory Corruption Vulnerability Apple iOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability n/a QNAP NAS devices running Photo Station Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability n/a QNAP NAS devices running Photo Station Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability n/a QNAP NAS devices Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability n/a QNAP NAS devices running Photo Station Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet FortiGate Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2019-6340 Drupal core - Highly critical - Remote Code Execution Drupal Drupal Core Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2019-6223 Apple iOS and macOS Group Facetime Vulnerability Apple iOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2019-5786 Google Chrome Blink Use-After-Free Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2019-5591 Fortinet FortiOS Default Configuration Vulnerability Fortinet Fortinet FortiOS Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability n/a ESXi and Horizon DaaS Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.