CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability Rails https://github.com/rails/rails Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-4716 IBM Planning Analytics Remote Code Execution Vulnerability IBM Planning Analytics Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2019-3929 Crestron Multiple Products Command Injection Vulnerability Crestron Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-3568 WhatsApp VOIP Stack Buffer Overflow Vulnerability Facebook WhatsApp for Android, Facebook WhatsApp Business for Android, Facebook WhatsApp for iOS, Facebook WhatsApp Business for iOS, Facebook WhatsApp for Windows Phone, Facebook WhatsApp for Tizen Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability Atlassian Confluence Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Atlassian Confluence Server Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-3010 Oracle Solaris Privilege Escalation Vulnerability Oracle Corporation Solaris Operating System Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-2725 Oracle WebLogic Server, Injection Oracle Corporation Tape Library ACSLS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-2616 Oracle BI Publisher Unauthorized Access Vulnerability Oracle Corporation BI Publisher (formerly XML Publisher) Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2019-2215 Android Kernel Use-After-Free Vulnerability n/a Android Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-20085 TVT NVMS-1000 Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-19356 Netis WF2419 Devices Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-18988 TeamViewer Desktop Bypass Remote Login Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7High
CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-18426 WhatsApp Cross-Site Scripting Vulnerability Facebook WhatsApp Desktop Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Vulnerability Trend Micro Trend Micro OfficeScan Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-17558 Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability n/a Apache Solr Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-17026 Mozilla Firefox And Thunderbird Type Confusion Vulnerability Mozilla Firefox ESR, Mozilla Thunderbird, Mozilla Firefox Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-16928 Exim Out-of-bounds Write Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-16920 D-Link Multiple Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-16759 vBulletin PHP Module Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.