CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2019-2725 Oracle WebLogic Server, Injection Oracle Corporation Tape Library ACSLS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-2616 Oracle BI Publisher Unauthorized Access Vulnerability Oracle Corporation BI Publisher (formerly XML Publisher) Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2019-2215 Android Kernel Use-After-Free Vulnerability n/a Android Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2019-20085 TVT NVMS-1000 Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-19356 Netis WF2419 Devices Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-18988 TeamViewer Desktop Bypass Remote Login Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7High
CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-18426 WhatsApp Cross-Site Scripting Vulnerability Facebook WhatsApp Desktop Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Vulnerability Trend Micro Trend Micro OfficeScan Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-17558 Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability n/a Apache Solr Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-17026 Mozilla Firefox And Thunderbird Type Confusion Vulnerability Mozilla Firefox ESR, Mozilla Thunderbird, Mozilla Firefox Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-16928 Exim Out-of-bounds Write Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-16920 D-Link Multiple Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-16759 vBulletin PHP Module Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2019-1652 Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability Cisco Cisco Small Business RV Series Router Firmware Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-16256 SIMalliance Toolbox Browser Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-16057 D-Link DNS-320 Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2019-15949 Nagios XI Remote Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability n/a Palo Alto Networks GlobalProtect Portal/Gateway Interface Versions & vendor guidance →	Known exploitedCISA KEV	8.1High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.