Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,324All CVEsplus 19,140 rejected
- 453Last 24 hours2,729 in the last 7 days
- 16,930Last 30 days1,561 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 11 | 2 | 0 | 0 | 13 | 134 |
| 2025 | 1 | 7 | 11 | 0 | 0 | 19 | 121 |
| 2024 | 0 | 14 | 15 | 0 | 0 | 29 | 102 |
| 2023 | 0 | 15 | 3 | 0 | 0 | 18 | 73 |
| 2022 | 1 | 5 | 7 | 0 | 0 | 13 | 55 |
| 2021 | 5 | 17 | 5 | 0 | 0 | 27 | 42 |
| 2020 | 3 | 2 | 1 | 0 | 0 | 6 | 15 |
| 2019 | 1 | 4 | 4 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-42808 | An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The host streaming API function {{coines_read_stream_sensor_data()}} fails to…Bosch Sensortec · COINES_SDK | Medium6.8 |
| CVE-2026-42807 | A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to…Bosch Sensortec · COINES_SDK | High8.0 |
| CVE-2026-42806 | An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically within the field data…Bosch Sensortec · BME690 SensorAPI (C) | Medium4.3 |
| CVE-2026-42805 | A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser function…Bosch Sensortec · BHI385 SensorAPI (C Library) | High8.4 |
| CVE-2026-42804 | A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commit d6b200416a. The…Bosch Sensortec · BHI360_SensorAPI (C-Library) | High7.6 |
| CVE-2026-56428 | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An…Bosch · BSH ELP (Electronic Platform) Modules | High8.1 |
| CVE-2024-58330 | A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data.Bosch · Camera Firmware | High7.5 |
| CVE-2024-58023 | Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.Bosch · Bosch Configuration Manager | High8.4 |
| CVE-2024-33618 | Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network…Bosch · BVMS | High7.5 |
| CVE-2025-60038 | A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated…Bosch Rexroth · IndraWorks | High7.8 |
| CVE-2025-60037 | A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated…Bosch Rexroth · IndraWorks | High7.8 |
| CVE-2025-60036 | A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw…Bosch Rexroth · IndraWorks | High7.8 |
| CVE-2025-60035 | A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw…Bosch Rexroth · IndraWorks | High7.8 |
| CVE-2025-48862 | Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set.…Bosch Rexroth AG · ctrlX OS - Setup | High7.1 |
| CVE-2025-48861 | A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application…Bosch Rexroth AG · ctrlX OS - Setup | Medium5.3 |
| CVE-2025-48860 | A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote access to backup…Bosch Rexroth AG · ctrlX OS - Setup | High8.0 |
| CVE-2025-29902 | Remote code execution that allows unauthorized users to execute arbitrary code on the server machine.Telex · Remote Dispatch Console Server | Critical10.0 |
| CVE-2025-27532 | A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access…Bosch Rexroth AG · ctrlX OS - Device Admin | Medium6.5 |
| CVE-2025-24351 | A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to execute…Bosch Rexroth AG · ctrlX OS - Device Admin | High8.8 |
| CVE-2025-24350 | A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to…Bosch Rexroth AG · ctrlX OS - Device Admin | High7.1 |
| CVE-2025-24349 | A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete…Bosch Rexroth AG · ctrlX OS - Device Admin | High7.1 |
| CVE-2025-24348 | A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to…Bosch Rexroth AG · ctrlX OS - Device Admin | Medium5.4 |
| CVE-2025-24347 | A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to…Bosch Rexroth AG · ctrlX OS - Device Admin | Medium6.5 |
| CVE-2025-24346 | A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the…Bosch Rexroth AG · ctrlX OS - Device Admin | High7.5 |
| CVE-2025-24345 | A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the…Bosch Rexroth AG · ctrlX OS - Device Admin | Medium6.3 |
| CVE-2025-24344 | A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags…Bosch Rexroth AG · ctrlX OS - Solutions | Medium6.3 |
| CVE-2025-24343 | A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write…Bosch Rexroth AG · ctrlX OS - Solutions | Medium5.4 |
| CVE-2025-24342 | A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid usernames via multiple…Bosch Rexroth AG · ctrlX OS - Device Admin | Medium5.3 |
| CVE-2025-24341 | A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a Denial-of-Service (DoS) condition on the…Bosch Rexroth AG · ctrlX OS - Device Admin | Medium6.5 |
| CVE-2025-24340 | A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker to recover the plaintext passwords of…Bosch Rexroth AG · ctrlX OS - Device Admin | Medium6.5 |
| CVE-2025-24339 | A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the vulnerable system,…Bosch Rexroth AG · ctrlX OS - Device Admin | Medium5.0 |
| CVE-2025-24338 | A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute…Bosch Rexroth AG · ctrlX OS - Solutions | High7.1 |
| CVE-2024-48989 | A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service,…Bosch Rexroth AG · IndraDrive FWA-INDRV*-MP* | High7.5 |
| CVE-2023-32228 | A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user.Bosch · AMS | Medium4.6 |
| CVE-2024-25002 | Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.Bosch · Network Synchronizer Enterprise | High8.8 |
| CVE-2023-48266 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48265 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48264 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48263 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48262 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48261 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48260 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48259 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48258 | The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.5 |
| CVE-2023-48257 | The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High7.8 |
| CVE-2023-48256 | The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48255 | The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium6.3 |
| CVE-2023-48254 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48253 | The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.8 |
| CVE-2023-48252 | The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.8 |