CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2024-6670 WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability Progress Software Corporation WhatsUp Gold Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-6047 GeoVision EOL device - OS Command Injection GeoVision GV_DSP_LPR_V2, GeoVision GV_IPCAMD_GV_BX1500, GeoVision GV_IPCAMD_GV_CB220, GeoVision GV_IPCAMD_GV_EBL1100, GeoVision GV_IPCAMD_GV_EFD1100, GeoVision GV_IPCAMD_GV_FD2410, GeoVision GV_IPCAMD_GV_FD3400, GeoVision GV_IPCAMD_GV_FE3401, GeoVision GV_IPCAMD_GV_FE420, GeoVision GV-VS14_VS14, GeoVision GV_VS03, GeoVision GV_VS2410, GeoVision GV_VS28XX, GeoVision GV_VS216XX, GeoVision GV VS04A, GeoVision GV VS04H, GeoVision GVLX 4 V2, GeoVision GVLX 4 V3, GeoVision GV_IPCAMD_GV_BX130, GeoVision GV_GM8186_VS14 Reported fix guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover Palo Alto Networks Expedition Reported fix guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability yiiframework Yii Versions & vendor guidance →	Known exploitedCISA KEV	9Critical
CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability Advantive VeraCore Versions & vendor guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2024-57728 SimpleHelp Path Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2024-57727 SimpleHelp Path Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2024-56145 RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms craftcms cms Versions & vendor guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet FortiOS, Fortinet FortiProxy Reported fix guidance →	Known exploitedCISA KEV	9.6Critical
CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	4.4Medium
CVE-2024-5447 PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS Unknown PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode Versions & vendor guidance →	Not in downloaded KEV	5.4Medium
CVE-2024-54085 Redfish Authentication Bypass AMI MegaRAC-SPx Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall SonicOS Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2024-53197 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices Linux Linux Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2024-53150 ALSA: usb-audio: Fix out of bounds reads when finding clock sources Linux Linux Versions & vendor guidance →	Known exploitedCISA KEV	7.1High
CVE-2024-53104 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format Linux Linux Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.3High
CVE-2024-5217 Incomplete Input Validation in GlideExpression Script ServiceNow Now Platform Versions & vendor guidance →	Known exploitedCISA KEV	9.2Critical
CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability Aviatrix Controller Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2024-50302 HID: core: zero-initialize the report buffer Linux Linux Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.