CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2018-19322 GIGABYTE Multiple Products Code Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-19321 GIGABYTE Multiple Products Privilege Escalation Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-19320 GIGABYTE Multiple Products Unspecified Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability TIBCO Software Inc. TIBCO JasperReports Library, TIBCO Software Inc. TIBCO JasperReports Library Community Edition, TIBCO Software Inc. TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Software Inc. TIBCO JasperReports Server, TIBCO Software Inc. TIBCO JasperReports Server Community Edition, TIBCO Software Inc. TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Software Inc. TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Software Inc. TIBCO Jaspersoft Reporting and Analytics for AWS Reported fix guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-17480 Google Chromium V8 Out-of-Bounds Write Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2018-17463 Google Chromium V8 Remote Code Execution Vulnerability Google Chrome Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2018-15982 Adobe Flash Player Use-After-Free Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability Adobe ColdFusion Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-14847 MikroTik Router OS Directory Traversal Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability [UNKNOWN] RichFaces Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability The Linux Foundation kernel Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write Fortinet Fortinet FortiOS and FortiProxy Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization Fortinet Fortinet FortiOS, FortiProxy Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability Fortinet Fortinet FortiOS, FortiProxy Versions & vendor guidance →	Known exploitedCISA KEV	9.1Critical
CVE-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Fortinet Fortinet FortiOS, fortiADC Versions & vendor guidance →	Known exploitedCISA KEV	4.3Medium
CVE-2018-1273 VMware Tanzu Spring Data Commons Property Binder Vulnerability Spring by Pivotal Spring Framework Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-11776 Apache Struts Remote Code Execution Vulnerability Apache Software Foundation Apache Struts Versions & vendor guidance →	Known exploitedCISA KEV	8.1High
CVE-2018-11138 Quest KACE System Management Appliance Remote Command Execution Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-10562 Dasan GPON Routers Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.