CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-6571 Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow kubeflow kubeflow/kubeflow Versions & vendor guidance →	Not in downloaded KEV	5.4Medium
CVE-2023-6570 Server-Side Request Forgery (SSRF) in kubeflow/kubeflow kubeflow kubeflow/kubeflow Versions & vendor guidance →	Not in downloaded KEV	7.7High
CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Cloud Software Group NetScaler ADC Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Cloud Software Group NetScaler ADC, Cloud Software Group NetScaler Gateway Versions & vendor guidance →	Known exploitedCISA KEV	5.5Medium
CVE-2023-6448 Unitronics VisiLogic uses a default administrative password Unitronics VisiLogic Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-6345 Google Skia Integer Overflow Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	9.6Critical
CVE-2023-5631 Stored XSS vulnerability in Roundcube Roundcube Roundcubemail Versions & vendor guidance →	Known exploitedCISA KEV	6.1Medium
CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow Vulnerability Google Chrome, Google libvpx Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-50224 TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability TP-Link TL-WR841N, TP-Link TL-WR841ND, TP-Link TL-MR6400, TP-Link Archer C5, TP-Link Archer C7, TP-Link TL-WDR3600, TP-Link TL-WDR4300, TP-Link TL-WDR3500, TP-Link TL-WR740N, TP-Link TL-WR741ND, TP-Link TL-WR749N, TP-Link TL-MR3420, TP-Link TL-WR1043ND, TP-Link TL-WR1045ND, TP-Link TL-WR840N, TP-Link TL-WR842N, TP-Link TL-WR842ND, TP-Link TL-WR845N, TP-Link TL-WR941ND, TP-Link TL-WR945N, TP-Link TL-WA801ND, TP-Link TL-WA901ND Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability FXC Inc. AE1021PE, FXC Inc. AE1021 Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-4966 Unauthenticated sensitive information disclosure Citrix NetScaler ADC, Citrix NetScaler Gateway Versions & vendor guidance →	Known exploitedCISA KEV	9.4Critical
CVE-2023-4911 Glibc: buffer overflow in ld.so leading to privilege escalation , Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Red Hat Enterprise Linux 9, Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 6, Red Hat Red Hat Enterprise Linux 7 Reported workaround →	Known exploitedCISA KEV	7.8High
CVE-2023-49105 ownCloud Improper Authentication Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet FortiClientEMS Reported fix guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Google Chrome, Google libwebp Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.6Critical
CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-47565 Legacy VioStor NVR QNAP Systems Inc. VioStor NVR Reported fix guidance →	Known exploitedCISA KEV	8High
CVE-2023-47246 SysAid Server Path Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti ICS, Ivanti IPS Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2023-46748 BIG-IP Configuration utility authenticated SQL injection vulnerability F5 BIG-IP Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability F5 BIG-IP Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.