Is your stack exploited right now?

List what you run. For each product and version you get the CVEs that hit it, whether CISA lists them as exploited in the wild, the odds of exploitation, and who is cited as exploiting them, quoted from the report that says so. Each finding says how sure the match is.