CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2019-7609 Kibana Arbitrary Code Execution Elastic Kibana Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability SonicWall SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability SonicWall SMA100 Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-7287 Apple iOS Memory Corruption Vulnerability Apple iOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-7286 Apple Multiple Products Memory Corruption Vulnerability Apple iOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability n/a QNAP NAS devices running Photo Station Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability n/a QNAP NAS devices running Photo Station Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability n/a QNAP NAS devices Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability n/a QNAP NAS devices running Photo Station Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Fortinet FortiGate Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2019-6340 Drupal core - Highly critical - Remote Code Execution Drupal Drupal Core Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2019-6223 Apple iOS and macOS Group Facetime Vulnerability Apple iOS, Apple macOS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2019-5786 Google Chrome Blink Use-After-Free Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2019-5591 Fortinet FortiOS Default Configuration Vulnerability Fortinet Fortinet FortiOS Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability n/a ESXi and Horizon DaaS Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability Rails https://github.com/rails/rails Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-4716 IBM Planning Analytics Remote Code Execution Vulnerability IBM Planning Analytics Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2019-3929 Crestron Multiple Products Command Injection Vulnerability Crestron Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-3568 WhatsApp VOIP Stack Buffer Overflow Vulnerability Facebook WhatsApp for Android, Facebook WhatsApp Business for Android, Facebook WhatsApp for iOS, Facebook WhatsApp Business for iOS, Facebook WhatsApp for Windows Phone, Facebook WhatsApp for Tizen Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability Atlassian Confluence Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Atlassian Confluence Server Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-3010 Oracle Solaris Privilege Escalation Vulnerability Oracle Corporation Solaris Operating System Versions & vendor guidance →	Known exploitedCISA KEV	8.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.