CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2018-10561 Dasan GPON Routers Authentication Bypass Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability Microsoft Corporation Equation Editor Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability Microsoft Corporation Equation Editor Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability n/a Cisco Adaptive Security Appliance unknown Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0180 Cisco IOS Software Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	6.8Medium
CVE-2018-0179 Cisco IOS Software Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	6.8Medium
CVE-2018-0175 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability n/a Cisco IOS, IOS XE, and IOS XR Versions & vendor guidance →	Known exploitedCISA KEV	8High
CVE-2018-0174 Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0173 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0172 Cisco IOS and IOS XE Software Improper Input Validation Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability n/a Cisco IOS, IOS XE, and IOS XR Versions & vendor guidance →	Known exploitedCISA KEV	8.8High
CVE-2018-0161 Cisco IOS Software Resource Management Errors Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	6.3Medium
CVE-2018-0159 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0158 Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0156 Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0155 Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2018-0154 Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability n/a Cisco IOS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability n/a Cisco IOS and IOS XE Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability n/a Cisco Secure Access Control System Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability n/a Cisco RV132W and RV134W Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-9841 PHPUnit Command Injection Vulnerability n/a n/a Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2017-9822 DotNetNuke (DNN) Remote Code Execution Vulnerability DotNetNuke DotNetNuke CMS Fixed in 9.1.1 Versions & vendor guidance →	Known exploitedCISA KEV	8.8High

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.