CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2018-0154 Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability n/a Cisco Secure Access Control System Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability n/a Cisco RV132W and RV134W Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-9841 PHPUnit Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-9822 DotNetNuke (DNN) Remote Code Execution Vulnerability DotNetNuke DotNetNuke CMS Fixed in 9.1.1 Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-9805 Apache Struts Deserialization of Untrusted Data Vulnerability Apache Software Foundation Apache Struts Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2017-9791 Apache Struts 1 Improper Input Validation Vulnerability Apache Software Foundation Apache Struts Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-9248 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft Corporation Microsoft .NET Framework Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability Microsoft Corporation Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016. Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability Microsoft Corporation Microsoft Windows Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-8540 Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Microsoft Corporation Malware Protection Engine Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability Microsoft Corporation Windows Shell Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-8291 Artifex Ghostscript Type Confusion Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability n/a Hikvision Cameras Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-7494 Samba Remote Code Execution Vulnerability Samba samba Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-7269 Microsoft Windows Server Buffer Overflow Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-6884 Zyxel EMG2926 Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6862 NETGEAR Multiple Devices Buffer Overflow Vulnerability n/a NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42 Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-6744 Cisco IOS Software SNMP Remote Code Execution Vulnerability Cisco IOS, IntelliShield Universal Product Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6743 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco IOS, IntelliShield Universal Product Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco Cisco IOS XE Software, IntelliShield Universal Product Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6740 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco IOS, IntelliShield Universal Product Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2017-6739 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability IntelliShield Universal Product Versions & vendor guidance →	Known exploitedCISA KEV	8.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.