Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,248All CVEsplus 19,137 rejected
- 466Last 24 hours2,750 in the last 7 days
- 16,905Last 30 days1,553 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 3 | 0 | 0 | 0 | 7 | 24 |
| 2025 | 2 | 0 | 1 | 0 | 0 | 3 | 17 |
| 2024 | 0 | 5 | 4 | 0 | 0 | 9 | 14 |
| 2023 | 0 | 2 | 3 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2025-64124 | Nuvation Energy Multi-Stack Controller OS Command InjectionNuvation Energy · Multi-Stack Controller (MSC) | High8.7 |
| CVE-2025-64125 | Nuvation Energy nCloud Client-to-Client CommunicationNuvation Energy · nCloud VPN Service | Critical9.4 |
| CVE-2025-64123 | Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS accessNuvation Energy · Multi-Stack Controller (MSC) | High7.9 |
| CVE-2025-64122 | Nuvation Energy Multi-Stack Controller Private Key Stored on DeviceNuvation Energy · Multi-Stack Controller (MSC) | High7.2 |
| CVE-2025-64121 | Nuvation Energy Multi-Stack Controller Authentication BypassNuvation Energy · Multi-Stack Controller (MSC) | Critical10.0 |
| CVE-2025-64120 | Nuvation Energy Multi-Stack Controller OS Command InjectionNuvation Energy · Multi-Stack Controller (MSC) | Critical9.4 |
| CVE-2025-64119 | Nuvation Energy BMS Client-side AuthenticationNuvation Energy · Battery Management System | Critical9.3 |
| CVE-2025-7676 | DLL hijacking of all PE32 executables on Windows 11 for ARM CPUsMicrosoft, Inc · Windows 11 | Medium5.4 |
| CVE-2025-53696 | iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may…Johnson Controls, Inc · iSTAR Ultra | Critical9.3 |
| CVE-2025-53695 | OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access ('root' user) to the device…Johnson Controls, Inc · iSTAR Ultra | Critical9.4 |
| CVE-2024-1480 | Unitronics Vision Standard Unauthenticated Password RetrievalUnitronics · Vision230 | High7.5 |
| CVE-2022-45792 | Directory Traversal in Project File Format allows overwrite (Zip Slip)Omron · Sysmac Studio | High7.8 |
| CVE-2022-45790 | Omron FINS memory protection susceptible to bruteforceOmron · CJ-series and CS-series CPU modules | High8.6 |
| CVE-2022-45794 | Omron CJ-series and CS-series unauthenticated filesystem access.Omron · CJ-series and CS-series CPU modules | High8.6 |
| CVE-2022-45793 | Executable files writable by low-privileged users in Omron Sysmac StudioOmron · Sysmac Studio | Medium5.5 |
| CVE-2023-29447 | Insufficiently Protected Credentials in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX | Medium5.7 |
| CVE-2023-29446 | Improper Input Validation in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX | Medium4.7 |
| CVE-2023-29445 | Uncontrolled Search Path Element in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX | High7.8 |
| CVE-2023-29444 | Uncontrolled Search Path Element in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX | Medium6.3 |
| CVE-2023-40710 | An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web…OPTO 22 · SNAP PAC S1 | Medium6.8 |
| CVE-2023-40709 | Uncontrolled Resource Consumption in OPTO 22 SNAP PAC S1 Built-In Web ServerOPTO 22 · SNAP PAC S1 | Medium6.8 |
| CVE-2023-40708 | Improper Access Control in OPTO 22 SNAP PAC S1OPTO 22 · SNAP PAC S1 | Medium5.8 |
| CVE-2023-40707 | Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web ServerOPTO 22 · SNAP PAC S1 | High8.6 |
| CVE-2023-40706 | Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web ServerOPTO 22 · SNAP PAC S1 | High8.6 |