CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2025-48384Git allows arbitrary code execution through broken config quoting git git Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2025-43504CVE-2025-43504 Apple Xcode Versions & vendor guidance → |
Not in downloaded KEV | 4.9Medium |
| CVE-2025-25257Fortinet FortiWeb SQL Injection Vulnerability Fortinet FortiWeb Reported fix guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2025-14733WatchGuard Firebox iked Out of Bounds Write Vulnerability WatchGuard Fireware OS Reported fix guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2024-5447PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS Unknown PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode Versions & vendor guidance → |
Not in downloaded KEV | 5.4Medium |
| CVE-2024-27834Apple Multiple Products Improper Authentication Vulnerability Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple watchOS Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti ICS, Ivanti IPS Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2023-7102Remote Code Execution (RCE) Vulnerability Barracuda Networks Inc. Barracuda ESG Appliance Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2023-6571Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow kubeflow kubeflow/kubeflow Versions & vendor guidance → |
Not in downloaded KEV | 5.4Medium |
| CVE-2023-6570Server-Side Request Forgery (SSRF) in kubeflow/kubeflow kubeflow kubeflow/kubeflow Versions & vendor guidance → |
Not in downloaded KEV | 7.7High |
| CVE-2023-46805Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti ICS, Ivanti IPS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.2High |
| CVE-2023-43619CVE-2023-43619 n/a n/a Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2023-2868Remote Code injection in Barracuda Email Security Gateway Barracuda Barracuda Email Security Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 9.4Critical |
| CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2023-22621CVE-2023-22621 n/a n/a Versions & vendor guidance → |
Not in downloaded KEV | 10Critical |
| CVE-2021-42287Active Directory Domain Services Elevation of Privilege Vulnerability Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server version 2004, Microsoft Windows Server version 20H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2021-42278Active Directory Domain Services Elevation of Privilege Vulnerability Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server version 2004, Microsoft Windows Server version 20H2 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2020-36323CVE-2020-36323 n/a n/a Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2020-1337Windows Print Spooler Elevation of Privilege Vulnerability Microsoft Windows 10 Version 2004, Microsoft Windows Server version 2004, Microsoft Windows 10 Version 1803, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1909, Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows 10 Version 1709 for 32-bit Systems, Microsoft Windows 10 Version 1709, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems, Microsoft Windows 10 Version 1903 for ARM64-based Systems, Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows 10 Version 1507, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 7, Microsoft Windows 7 Service Pack 1, Microsoft Windows 8.1, Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 R2 Service Pack 1, Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation), Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 7.8High |
| CVE-2019-6693Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet FortiGate Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2019-17558Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability n/a Apache Solr Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2019-14271CVE-2019-14271 n/a n/a Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2017-16995CVE-2017-16995 n/a n/a Versions & vendor guidance → |
Not in downloaded KEV | Unknown |
| CVE-2016-3081Apache Struts Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.