Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,040All CVEsplus 18,873 rejected
  • 732Last 24 hours3,248 in the last 7 days
  • 17,396Last 30 days1,557 of them critical
  • 1,766Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000029
202500000029
202400000029
202300000029
202200000029
202100000029
202014114002929

Latest CVEs

29 CVEs, newest first

CVEs, newest first
Title
CVE-2020-10291
RVD#3336: System information disclosure without authentication on KUKA simulatorsKUKA Roboter GmbH · Visual Components Network License Server 2.0.8
High7.5
CVE-2020-10292
Service DoS through arbitrary pointer dereferencing on KUKA simulatorKUKA Roboter GmbH · Visual Components Network License Server 2.0.8
High8.2
CVE-2020-10290
RVD#1495: Universal Robots URCaps execute with unbounded privilegesUniversal Robots · URx
Medium6.8
CVE-2020-10283
RVD#3317: MAVLink version handshaking allows for an attacker to bypass authenticationPX4 · MAVLink
High8.1
CVE-2020-10289
RVD#2401: Use of unsafe yaml load, ./src/actionlib/tools/library.py:132Open Robotics · ros
High8.0
CVE-2020-10287
RVD#3326: Hardcoded default credentials on IRC 5 OPC ServerABB · IRB140
Critical9.1
CVE-2020-10288
RVD#3327: No authentication required for accesing ABB IRC5 FTP serverABB · IRB140
Critical9.8
CVE-2020-10286
RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoSuFactory · xArm 5 Lite, xArm 6 and xArm 7
Critical9.4
CVE-2020-10285
RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networksuFactory · xArm5 Lite, xArm 6 and xArm 7
Critical9.4
CVE-2020-10284
RVD#3321: No Authentication required to exert manual control of the robotuFactory · xArm5 Lite, xArm 6 and xArm 7
Critical9.1
CVE-2020-10282
RVD#3316: No authentication in MAVLink protocolunspecified · MAVLink
Critical9.8
CVE-2020-10281
RVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.0unspecified · MAVLink
High7.5
CVE-2020-10279
RVD#2569: Insecure operating system defaults in MiR robotsMobile Industrial Robots A/S · MiR100
Critical10.0
CVE-2020-10280
RVD#2568: Apache server is vulnerable to a DoSMobile Industrial Robots A/S · MiR100
High8.2
CVE-2020-10269
RVD#2566: Hardcoded Credentials on MiRX00 wireless Access PointMobile Industrial Robots A/S · MiR100
Critical9.8
CVE-2020-10275
RVD#2565: Weak token generation for the REST API.Mobile Industrial Robots A/S · MiR100
Critical9.8
CVE-2020-10273
RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllersMobile Industrial Robots A/S · MiR100
High7.5
CVE-2020-10278
RVD#2561: Unprotected BIOS allows user to boot from live OS image.Mobile Industrial Robots A/S · MiR100
Medium6.1
CVE-2020-10277
RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalationMobile Industrial Robots A/S · MiR100
Medium6.4
CVE-2020-10270
RVD#2557: Hardcoded Credentials on MiRX00 Control DashboardMobile Industrial Robots A/S · MiR100
Critical9.8
CVE-2020-10276
RVD#2558: Default credentials on SICK PLC allows disabling safety featuresMobile Industrial Robots A/S · MiR100
Critical9.8
CVE-2020-10271
RVD#2555: MiR ROS computational graph is exposed to all network interfaces, including poorly secured wireless networks and open wired onesMobile Industrial Robots A/S · MiR100
Critical10.0
CVE-2020-10274
RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps)Mobile Industrial Robots A/S · MiR100
High7.1
CVE-2020-10272
RVD#2554: MiR ROS computational graph presents no authentication mechanismsMobile Industrial Robots A/S · MiR100
Critical10.0
CVE-2020-10268
RVD#2550: Terminate Critical Services in KUKA controller KR C4KUKA Roboter GmbH · KR3R540, KRC4, KSS8.5.7HF1, Win7_Embedded
Medium6.1
CVE-2020-10267
RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versionsUniversal Robots · UR3, UR5 and UR10
High7.5
CVE-2020-10266
RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robotUniversal Robots · URx
High8.8
CVE-2020-10265
RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functionsUniversal Robots · Universal Robots Robot Controllers CB 2, CB3, e-series
Critical9.4
CVE-2020-10264
RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputsUniversal Robots A/S · Universal Robots Robot Controllers CB 3.1
High8.8