Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,289All CVEsplus 18,877 rejected
- 693Last 24 hours3,080 in the last 7 days
- 17,445Last 30 days1,578 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 6 | 7 | 0 | 0 | 13 | 57 |
| 2025 | 0 | 8 | 7 | 0 | 0 | 15 | 44 |
| 2024 | 0 | 0 | 6 | 0 | 0 | 6 | 29 |
| 2023 | 0 | 0 | 3 | 0 | 0 | 3 | 23 |
| 2022 | 0 | 1 | 5 | 1 | 0 | 7 | 20 |
| 2021 | 1 | 5 | 2 | 0 | 0 | 8 | 13 |
| 2020 | 0 | 4 | 0 | 1 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-41022 | Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a…Eaton · easySoft | Medium5.9 |
| CVE-2026-41021 | Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline…Eaton · easyE4 | High7.5 |
| CVE-2026-41020 | Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay…Eaton · easyE4 | High7.5 |
| CVE-2026-22622 | Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate…Eaton · PADM | High8.8 |
| CVE-2026-22621 | Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to…Eaton · PADM | High8.3 |
| CVE-2026-22620 | Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass…Eaton · PADM | High8.6 |
| CVE-2026-22619 | Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code execution by an attacker…Eaton · IPP software | High7.8 |
| CVE-2026-22618 | A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP response header was set with an insecure attribute,…Eaton · IPP software | Medium5.9 |
| CVE-2026-22617 | Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie and exploit…Eaton · IPP Software | Medium5.7 |
| CVE-2026-22616 | Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting…Eaton · IPP Software | Medium6.5 |
| CVE-2026-22615 | Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to…Eaton · IPP Software | Medium6.0 |
| CVE-2026-22614 | The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and…Eaton · EasySoft | Medium6.1 |
| CVE-2026-22613 | The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a…Eaton · Network M3 | Medium5.7 |
| CVE-2025-67450 | Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software package could perform arbitrary code…Eaton · UPS Companion software | High7.8 |
| CVE-2025-59888 | Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the…Eaton · UPS Companion software | Medium6.7 |
| CVE-2025-59887 | Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to…Eaton · Eaton UPS Companion Software | High8.6 |
| CVE-2025-59886 | Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker with network access to the device…Eaton · Eaton xComfort ECI | High8.8 |
| CVE-2025-59890 | Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with…Eaton · Eaton Galileo Software | High7.3 |
| CVE-2025-48397 | The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script…Eaton · Eaton Brightlayer Software Suite (BLSS) | High7.1 |
| CVE-2025-48396 | Arbitrary code execution is possible due to improper validation of the file upload functionality in Eaton BLSS. This security issue has been fixed in the…Eaton · Eaton Brightlayer Software Suite (BLSS) | High8.3 |
| CVE-2025-59889 | Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the…Eaton · Eaton IPP software | High8.6 |
| CVE-2025-48395 | An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI.…Eaton · NMC G2 | Medium4.7 |
| CVE-2025-48394 | An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI.…Eaton · G4 PDU | Medium4.7 |
| CVE-2025-48393 | The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a…Eaton · G4 PDU | Medium5.7 |
| CVE-2025-22493 | Improper cookie attributes in Foreseer Reporting Software (FRS)Eaton · Foreseer Reporting Software (FRS) | Medium5.6 |
| CVE-2025-22492 | Insecure storage of connection strings in FRSEaton · Foreseer Reporting Software (FRS) | Medium6.3 |
| CVE-2025-22491 | Improper Input Validation in Foreseer Reporting Software (FRS)Eaton · Foreseer Reporting Software (FRS) | Medium6.7 |
| CVE-2025-22495 | An improper input validation vulnerability was discovered in the NTP server configuration field of the Network-M2 card. This could result in an authenticated…Eaton · Network M2 | High8.4 |
| CVE-2022-33862 | Improper access control mechanism in IPPEaton · Intelligent Power Protector (IPP) | Medium6.7 |
| CVE-2022-33861 | Insufficient verification of authenticity in IPPEaton · Intelligent Power Protector | Medium5.1 |
| CVE-2021-23282 | Stored Cross-site Scripting reported in Intelligent Power Manager v1Eaton · Intelligent Power Manager (IPM) | Medium5.2 |
| CVE-2024-31416 | The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc. Some of…Eaton · Foreseer | Medium5.6 |
| CVE-2024-31415 | The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user…Eaton · Foreseer | Medium6.3 |
| CVE-2024-31414 | The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in the Eaton…Eaton · Foreseer | Medium6.7 |
| CVE-2023-43777 | Insecure storage of password in easySoftEaton · easySoft | Medium5.9 |
| CVE-2023-43776 | Weak encoding vulnerability in easyE4Eaton · easyE4 | Medium6.8 |
| CVE-2023-43775 | Security issue in SMP Gateway automation platformEaton · SMP SG-4260 | Medium4.7 |
| CVE-2022-33859 | Unrestricted file upload in Eaton Foreseer EPMSEaton · Foreseer EPMS | High8.1 |
| CVE-2021-23283 | Security issues in Eaton Intelligent Power Protector (IPP)Eaton · Eaton Intelligent Power Protector (IPP) | Medium5.2 |
| CVE-2021-23286 | Security issues in Eaton Intelligent Power Manager InfrastructureEaton · Intelligent Power Manager Infrastructure (IPM Infrastructure) | Medium5.7 |
| CVE-2021-23284 | Security issues in Eaton Intelligent Power Manager InfrastructureEaton · Intelligent Power Manager Infrastructure (IPM Infrastructure) | Medium5.7 |
| CVE-2021-23285 | Security issues in Eaton Intelligent Power Manager InfrastructureEaton · Intelligent Power Manager Infrastructure (IPM Infrastructure) | Low3.1 |
| CVE-2021-23288 | Security issues in Intelligent Power ProtectorEaton · Intelligent Power Protector | Medium5.6 |
| CVE-2021-23287 | Security issues in Intelligent Power Manager (IPM 1)Eaton · Intelligent Power Manager (IPM 1) | Medium5.6 |
| CVE-2021-23280 | Arbitrary File uploadEaton · Intelligent Power manager (IPM) | High8.0 |
| CVE-2021-23277 | Improper Neutralization of Directives in Dynamically Evaluated CodeEaton · Intelligent Power manager (IPM) | High8.3 |
| CVE-2021-23281 | Remote Code executionEaton · Intelligent Power manager (IPM) | Critical10.0 |
| CVE-2021-23279 | Arbitrary File deleteEaton · Intelligent Power manager (IPM) | High8.0 |
| CVE-2021-23276 | Improper Neutralization of Special Elements used in an SQL CommandEaton · Intelligent Power manager (IPM) | High7.1 |
| CVE-2021-23278 | Arbitrary File deleteEaton · Intelligent Power manager (IPM) | High8.7 |