Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,172All CVEsplus 18,875 rejected
- 816Last 24 hours3,236 in the last 7 days
- 17,417Last 30 days1,565 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 2 | 4 | 0 | 11 | 80 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 69 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 68 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 68 |
| 2022 | 4 | 5 | 2 | 0 | 0 | 11 | 68 |
| 2021 | 0 | 1 | 1 | 0 | 0 | 2 | 57 |
| 2020 | 4 | 6 | 5 | 0 | 0 | 15 | 55 |
| 2019 | 6 | 3 | 2 | 0 | 0 | 11 | 40 |
| 2018 | 9 | 10 | 8 | 0 | 0 | 27 | 29 |
| 2017 | 1 | 0 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-8370 | Automic Automation Agent Unix privilege escalationBroadcom · Automic Automation | High8.5 |
| CVE-2025-69276 | Spectrum insecure deserialiationBroadcom · DX NetOps Spectrum | Low2.3 |
| CVE-2025-69275 | Spectrum outdated java library in class-pathBroadcom · DX NetOps Spectrum | High7.1 |
| CVE-2025-69274 | Spectrum broken authorization schemeBroadcom · DX NetOps Spectrum | Low2.3 |
| CVE-2025-69273 | Spectrum broken authenticationBroadcom · DX NetOps Spectrum | High8.7 |
| CVE-2025-69272 | Spectrum password returned in clearBroadcom · DX NetOps Spectrum | Medium5.3 |
| CVE-2025-69271 | Spectrum basic authentication in useBroadcom · DX NetOps Spectrum | Low2.3 |
| CVE-2025-69270 | Spectrum session token in URLBroadcom · DX NetOps Spectrum | Low2.3 |
| CVE-2025-69269 | Spectrum command injection in NCM serviceBroadcom · DX NetOps Spectrum | High7.1 |
| CVE-2025-69268 | Spectrum reflected XSSBroadcom · DX NetOps Spectrum | Medium5.3 |
| CVE-2025-69267 | Spectrum directory path traversalBroadcom · DX NetOps Spectrum | High8.8 |
| CVE-2025-4971 | Broadcom Automic Automation Agent Unix privilege escalationBroadcom · Automic Automation | High8.5 |
| CVE-2022-33739 | CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any…CA Clarity | High7.5 |
| CVE-2022-33756 | CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially…CA Automic Automation | High7.5 |
| CVE-2022-33755 | CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially…CA Automic Automation | Medium5.3 |
| CVE-2022-33754 | CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to…CA Automic Automation | Critical9.8 |
| CVE-2022-33753 | CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially…CA Automic Automation | High8.8 |
| CVE-2022-33752 | CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to…CA Automic Automation | Critical9.8 |
| CVE-2022-33751 | CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to potentially…CA Automic Automation | High7.5 |
| CVE-2022-33750 | CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially…CA Automic Automation | Critical9.8 |
| CVE-2022-23992 | XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote…XCOM Data Transport for Windows, Linux, and UNIX | Critical9.8 |
| CVE-2022-22689 | CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient…CA Harvest Software Change Manager | High8.8 |
| CVE-2022-23083 | NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due…NetMaster Network Management for TCP/IP and NetMaster File Transfer Management | Medium6.1 |
| CVE-2021-44050 | CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that…CA Network Flow Analysis (NFA) | Medium6.5 |
| CVE-2020-29478 | CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial…CA Technologies, A Broadcom Company · CA Service Catalog | High7.5 |
| CVE-2020-28421 | CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elevate…CA Unified Infrastructure Management | High7.8 |
| CVE-2020-11660 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.CA API Developer Portal | Medium6.5 |
| CVE-2020-11659 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.CA API Developer Portal | Medium4.3 |
| CVE-2020-11658 | CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.CA API Developer Portal | Critical9.8 |
| CVE-2020-11663 | CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.CA API Developer Portal | Medium6.1 |
| CVE-2020-11662 | CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access…CA API Developer Portal | High7.5 |
| CVE-2020-11661 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.CA API Developer Portal | High8.1 |
| CVE-2020-11666 | CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.CA API Developer Portal | High8.8 |
| CVE-2020-11665 | CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.CA API Developer Portal | Medium6.1 |
| CVE-2020-11664 | CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.CA API Developer Portal | Medium6.1 |
| CVE-2020-8012 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller)…CA Technologies - A Broadcom Company · CA Unified Infrastructure Management (Nimsoft/UIM) | Critical9.8 |
| CVE-2020-8010 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller)…CA Technologies - A Broadcom Company · CA Unified Infrastructure Management (Nimsoft/UIM) | Critical9.8 |
| CVE-2020-8011 | CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller)…CA Technologies - A Broadcom Company · CA Unified Infrastructure Management (Nimsoft/UIM) | High7.5 |
| CVE-2019-19544 | CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges.…CA Automic Dollar Universe | High7.8 |
| CVE-2019-19518 | CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote…CA Automic Sysload | Critical9.8 |
| CVE-2019-19231 | An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain…CA Technologies, Broadcom Company · CA Client Automation | High7.3 |
| CVE-2019-19230 | An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to…CA Technologies, A Broadcom Company · CA Release Automation | Critical9.8 |
| CVE-2019-13657 | CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute…CA Technologies, A Broadcom Company · CA Performance Management | Critical9.8 |
| CVE-2019-13658 | CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise…CA Technologies, a Broadcom Company · CA Network Flow Analysis | Critical9.8 |
| CVE-2019-13656 | An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to…CA Technologies · Client Automation | Critical9.8 |
| CVE-2019-7393 | A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk…CA Technologies, A Broadcom Company · CA Strong Authentication | Medium4.3 |
| CVE-2019-7394 | A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA…CA Technologies, A Broadcom Company · CA Strong Authentication | High8.8 |
| CVE-2019-7392 | An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive… | Critical9.1 |
| CVE-2019-6504 | Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct…CA Technologies - A Broadcom Company · CA Automic Workload Automation | Medium6.1 |
| CVE-2018-19635 | CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface.CA Technologies · CA Service Desk Manager | Critical9.8 |