CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2015-8651 Adobe Flash Player Integer Overflow Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2015-7645 Adobe Flash Player Arbitrary Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2015-6175 Microsoft Windows Kernel Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2015-5317 Jenkins User Interface (UI) Information Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-5123 Adobe Flash Player Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-5122 Adobe Flash Player Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-5119 Adobe Flash Player Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-4902 Oracle Java SE Integrity Check Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	5.3Medium
CVE-2015-4852 Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2015-4495 Mozilla Firefox Security Feature Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2015-4068 Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2015-3306 ProFTPD Improper Access Control Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.4High
CVE-2015-3113 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-3043 Adobe Flash Player Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-3035 TP-Link Multiple Archer Devices Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2015-2590 Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2015-2546 Microsoft Win32k Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2015-2545 Microsoft Office Malformed EPS File Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.