Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,903All CVEsplus 19,118 rejected
- 373Last 24 hours2,796 in the last 7 days
- 16,784Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 12 | 2 | 0 | 19 | 88 |
| 2025 | 2 | 4 | 8 | 2 | 0 | 16 | 69 |
| 2024 | 6 | 12 | 21 | 1 | 0 | 40 | 53 |
| 2023 | 2 | 8 | 1 | 2 | 0 | 13 | 13 |
| Title | ||
|---|---|---|
| CVE-2026-49319 | Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay AttackAlps Electric Co., Ltd. · Remote Keyless Entry System (RKES) R53R0 | Medium6.9 |
| CVE-2026-49318 | Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at bootIndian Motorcycle · Scout Bobber + Tech | Low1.0 |
| CVE-2026-49317 | Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at bootIndian Motorcycle · Scout Bobber + Tech | Low1.0 |
| CVE-2026-49316 | Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdownIndian Motorcycle · Scout Bobber + Tech | Medium4.1 |
| CVE-2026-49325 | Indian Scout Bobber 2025 WCM voltage-based shutdownIndian Motorcycle · Scout Bobber + Tech | Medium4.1 |
| CVE-2026-49324 | Indian Scout Bobber 2025 WCM brute-forceIndian Motorcycle · Scout Bobber + Tech | Medium4.1 |
| CVE-2026-49323 | Indian Scout Bobber 2025 WCM-to-ECM weak authenticationIndian Motorcycle · Scout Bobber + Tech | Medium4.1 |
| CVE-2026-49322 | Indian Scout Bobber 2025 Infotainment-to-WCM weak authentication allows recovery of user PIN from observed exchangeIndian Motorcycle · Scout Bobber + Tech | Medium4.1 |
| CVE-2026-2541 | Micca KE700 Brute-force vulnerability due to low entropyMicca Auto Electronics Co., Ltd. · Car Alarm System KE700 | Medium6.4 |
| CVE-2026-2540 | Micca KE700 Acceptance of previously used rolling codesMicca Auto Electronics Co., Ltd. · Car Alarm System KE700 | High8.4 |
| CVE-2026-2539 | Micca KE700 Cleartext transmission of key fob IDMicca Auto Electronics Co., Ltd. · Car Alarm System KE700 | Medium5.7 |
| CVE-2025-32063 | Enabling SSH server on Infotainment ECUBosch · Infotainment system ECU | Medium6.8 |
| CVE-2025-32062 | Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch · Infotainment system ECU | High8.8 |
| CVE-2025-32061 | Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch · Infotainment system ECU | High8.8 |
| CVE-2025-32060 | Absence of Kernel Module Signature Verification on Linux System of Infotainment ECUBosch · Infotainment system ECU | Medium6.7 |
| CVE-2025-32059 | Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch · Infotainment system ECU | High8.8 |
| CVE-2025-32058 | Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECUBosch · Infotainment system ECU | Critical9.3 |
| CVE-2025-32057 | Misconfigured SSL/TLS communication of Redbend service for Infotainment ECUBosch · Infotainment system ECU | Medium6.5 |
| CVE-2025-32056 | Anti-Theft Bypass for Infotainment ECUBosch · Infotainment system ECU | Medium4.0 |
| CVE-2025-6785 | Tesla Model 3 Physical CAN Bus InjectionTesla · Model 3 | Medium4.7 |
| CVE-2025-7020 | BYD DiLink OS Incorrect encryption Implementation of system log dumpsBYD · DiLink OS | Medium5.1 |
| CVE-2023-28902 | Denial of Service via integer underflow in picserverPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | Low3.3 |
| CVE-2023-28903 | An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a…Preh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | Low3.3 |
| CVE-2023-28904 | Bypass of secure boot processPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | Medium5.2 |
| CVE-2023-28905 | Heap buffer overflow in picserverPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | High8.0 |
| CVE-2023-28906 | Command injection in networking servicePreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | High7.8 |
| CVE-2023-28907 | A lack of access restrictions on internal memory regionsPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | Medium6.7 |
| CVE-2023-28908 | Integer Overflow in Non-Fragmented Data ReceptionPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | Medium5.4 |
| CVE-2023-28909 | Integer Overflow Leading to MTU BypassPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | High8.0 |
| CVE-2023-28910 | Disabled Abortion FlagPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | High8.0 |
| CVE-2023-28911 | Arbitrary Channel Disconnection Resulting in Denial of ServicePreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | Medium6.5 |
| CVE-2023-28912 | Cleartext Phonebook InformationPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | Medium5.7 |
| CVE-2023-29113 | A lack of access control in custom IPC mechanismPreh Car Connect GmbH (JOYNEXT GmbH) · Volkswagen MIB3 infotainment system MIB3 OI MQB | Medium6.3 |
| CVE-2025-6030 | Autoeastern Smart Keyless Entry System Replay AttackAutoeastern · Cyclone Matrix TRF | Critical9.4 |
| CVE-2025-6029 | KIA-branded Aftermarket Generic Smart Keyless Entry System Replay AttackKIA · Aftermarket Generic Smart Keyless Entry System | Critical9.4 |
| CVE-2023-29126 | Insecure loose comparison in Enel X JuiceBoxEnel X · JuiceBox Pro 3.0 22kW Cellular | Medium4.2 |
| CVE-2023-29125 | Heap overflow in CM_main.exe binary in Enel X JuiceBoxEnel X · JuiceBox Pro 3.0 22kW Cellular | Critical9.0 |
| CVE-2023-29122 | Incorrect file ownership of privileged service's libraries in Enel X JuiceBoxEnel X · JuiceBox Pro 3.0 22kW Cellular | Medium6.7 |
| CVE-2023-29121 | Exposed TCF agent service in Enel X JuiceboxEnel X · JuiceBox Pro 3.0 22kW Cellular | Critical9.6 |
| CVE-2023-29120 | Unauthorized Remote Command Execution in Enel X JuiceboxEnel X · JuiceBox Pro 3.0 22kW Cellular | Critical9.6 |
| CVE-2023-29119 | Unauthorized SQLite InjectionEnel X · JuiceBox Pro 3.0 22kW Cellular | Critical9.6 |
| CVE-2023-29118 | Unauthorized SQLite Injection in Enel X JuiceboxEnel X · JuiceBox Pro 3.0 22kW Cellular | Critical9.6 |
| CVE-2023-29117 | Authentication Bypass in JuiceBox Web Manager interfaceEnel X · JuiceBox Pro 3.0 22kW Cellular | High8.8 |
| CVE-2023-29116 | PHP Information Disclosure in Enel X JuiceBoxEnel X · JuiceBox Pro 3.0 22kW Cellular | Medium4.3 |
| CVE-2023-29115 | Denial of Service via Web Management interface in Enel X JuiceBoxEnel X · JuiceBox Pro 3.0 22kW Cellular | Medium6.5 |
| CVE-2023-29114 | Unauthorized System Log Disclosure in Enel X JuiceBoxEnel X · JuiceBox Pro 3.0 22kW Cellular | Medium5.7 |
| CVE-2024-6245 | Default Credentials in ssh service for SmartPlay in Maruti SuzukiFaurecia Clarion Electronics Co., Ltd. · SmartPlay | High7.4 |
| CVE-2024-23923 | Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution VulnerabilityAlpine · Halo9 | High8.8 |
| CVE-2024-23960 | Alpine Halo9 Improper Verification of Cryptographic Signature VulnerabilityAlpine · Halo9 | Medium4.6 |
| CVE-2024-23924 | Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution VulnerabilityAlpine · Halo9 | Medium6.8 |