CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2018-20062 ThinkPHP "noneCms" Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-19953 QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP Systems Inc. QTS Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2018-19949 QNAP NAS File Station Command Injection Vulnerability QNAP Systems Inc. QTS Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-19943 QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP Systems Inc. QTS Versions & vendor guidance →	Known exploitedCISA KEV	8High
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-19323 GIGABYTE Multiple Products Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-19322 GIGABYTE Multiple Products Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-19321 GIGABYTE Multiple Products Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-19320 GIGABYTE Multiple Products Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability TIBCO Software Inc. TIBCO JasperReports Library, TIBCO Software Inc. TIBCO JasperReports Library Community Edition, TIBCO Software Inc. TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Software Inc. TIBCO JasperReports Server, TIBCO Software Inc. TIBCO JasperReports Server Community Edition, TIBCO Software Inc. TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Software Inc. TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Software Inc. TIBCO Jaspersoft Reporting and Analytics for AWS Reported fix guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-17480 Google Chromium V8 Out-of-Bounds Write Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2018-17463 Google Chromium V8 Remote Code Execution Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2018-15982 Adobe Flash Player Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability Adobe ColdFusion Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-14847 MikroTik Router OS Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability [UNKNOWN] RichFaces Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability The Linux Foundation kernel Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write Fortinet Fortinet FortiOS and FortiProxy Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization Fortinet Fortinet FortiOS, FortiProxy Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.