CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2025-10035 Deserialization Vulnerability in GoAnywhere MFT's License Servlet Fortra GoAnywhere MFT Reported fix guidance →	Known exploitedCISA KEV	10Critical
CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability Trimble Cityworks, Trimble Cityworks (with office companion) Reported fix guidance →	Known exploitedCISA KEV	8.6High
CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability 7-Zip 7-Zip Versions & vendor guidance →	Known exploitedCISA KEV	7High
CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti Connect Secure, Ivanti Policy Secure, Ivanti Neurons for ZTA gateways Versions & vendor guidance →	Known exploitedCISA KEV	9Critical
CVE-2025-0111 PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance →	Known exploitedCISA KEV	7.1High
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance →	Known exploitedCISA KEV	8.8High
CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-9537 ScienceLogic SL1 unspecified vulnerability ScienceLogic SL1 Versions & vendor guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance →	Known exploitedCISA KEV	6.9Medium
CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure Palo Alto Networks Expedition Reported fix guidance →	Known exploitedCISA KEV	9.2Critical
CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure Palo Alto Networks Expedition Reported fix guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti CSA (Cloud Services Appliance) Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti CSA (Cloud Services Appliance) Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti CSA (Cloud Services Appliance) Versions & vendor guidance →	Known exploitedCISA KEV	9.4Critical
CVE-2024-8957 PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration PTZOptics PT30X-SDI, PTZOptics PT30X-NDI Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-8956 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication PTZOptics PT30X-SDI, PTZOptics PT30X-NDI Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti CSA (Cloud Services Appliance) Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-8069 Limited remote code execution with privilege of a NetworkService Account access Citrix Session Recording Citrix Session Recording Versions & vendor guidance →	Known exploitedCISA KEV	5.1Medium
CVE-2024-8068 Privilege escalation to NetworkService Account access Citrix Citrix Session Recording Versions & vendor guidance →	Known exploitedCISA KEV	5.1Medium
CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload TeamT5 ThreatSonar Anti-Ransomware Reported fix guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti vTM Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung Electronics MagicINFO 9 Server Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2024-7262 Arbitrary Code Execution in WPS Office Kingsoft WPS Office Reported fix guidance →	Known exploitedCISA KEV	9.3Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.