CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability Fortinet Fortinet FortiOS, FortiProxy Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Fortinet Fortinet FortiOS, fortiADC Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2018-1273 VMware Tanzu Spring Data Commons Property Binder Vulnerability Spring by Pivotal Spring Framework Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-11776 Apache Struts Remote Code Execution Vulnerability Apache Software Foundation Apache Struts Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2018-11138 Quest KACE System Management Appliance Remote Command Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-10562 Dasan GPON Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-10561 Dasan GPON Routers Authentication Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability Microsoft Corporation Equation Editor Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability Microsoft Corporation Equation Editor Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability n/a Cisco Adaptive Security Appliance unknown Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0180 Cisco IOS Software Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	6.8Medium
CVE-2018-0179 Cisco IOS Software Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	6.8Medium
CVE-2018-0175 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability n/a Cisco IOS, IOS XE, and IOS XR Versions & vendor guidance →	Known exploitedCISA KEV	8High
CVE-2018-0174 Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0173 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0172 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability n/a Cisco IOS, IOS XE, and IOS XR Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2018-0161 Cisco IOS Software Resource Management Errors Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	6.3Medium
CVE-2018-0159 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0158 Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0156 Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0155 Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.