Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,098All CVEsplus 18,873 rejected
- 780Last 24 hours3,275 in the last 7 days
- 17,390Last 30 days1,565 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 129 | 259 | 131 | 6 | 0 | 525 | 3,909 |
| 2025 | 70 | 160 | 101 | 2 | 0 | 333 | 3,384 |
| 2024 | 53 | 138 | 60 | 4 | 0 | 255 | 3,051 |
| 2023 | 74 | 175 | 78 | 8 | 0 | 335 | 2,796 |
| 2022 | 116 | 233 | 128 | 16 | 0 | 493 | 2,461 |
| 2021 | 64 | 168 | 72 | 2 | 0 | 306 | 1,968 |
| 2020 | 82 | 130 | 57 | 11 | 0 | 280 | 1,662 |
| 2019 | 58 | 111 | 53 | 6 | 0 | 228 | 1,382 |
| 2018 | 109 | 139 | 83 | 7 | 0 | 338 | 1,154 |
| 2017 | 78 | 128 | 66 | 4 | 0 | 276 | 816 |
| 2016 | 30 | 55 | 41 | 4 | 0 | 130 | 540 |
| 2015 | 13 | 50 | 70 | 12 | 0 | 145 | 410 |
| 2014 | 10 | 53 | 35 | 6 | 0 | 104 | 265 |
| 2013 | 4 | 64 | 41 | 3 | 0 | 112 | 161 |
| 2012 | 4 | 26 | 17 | 2 | 0 | 49 | 49 |
| Title | ||
|---|---|---|
| CVE-2022-30267 | Emerson Ovation Insufficient Verification of Data AuthenticityEmerson · Ovation | High8.7 |
| CVE-2022-29966 | Emerson Ovation Missing Authentication for Critical FunctionalityEmerson · Ovation | Critical9.3 |
| CVE-2026-114598 | Access of resource using incompatible type ('type confusion') in EPICS BaseThe EPICS Community · EPICS Base | High8.7 |
| CVE-2026-114597 | Improper handling of length parameter inconsistency in EPICS BaseThe EPICS Community · EPICS Base | High8.7 |
| CVE-2026-114596 | Integer overflow or wraparound in EPICS BaseThe EPICS Community · EPICS Base | High8.8 |
| CVE-2026-114595 | Integer overflow or wraparound in EPICS BaseThe EPICS Community · EPICS Base | Critical9.3 |
| CVE-2026-110825 | Kiloview E3 NDI Encoder Missing Authentication for Critical FunctionKiloview · E3 Firmware | High8.7 |
| CVE-2026-92450 | Kiloview E3 NDI Encoder Use of Hard-coded CredentialsKiloview · E3 Firmware | High8.7 |
| CVE-2026-110243 | Kiloview E3 NDI Encoder OS Command InjectionKiloview · E3 Firmware | Critical9.4 |
| CVE-2026-107861 | Kiloview E3 NDI Encoder OS Command InjectionKiloview · E3 Firmware | Critical9.4 |
| CVE-2026-110491 | Kiloview E3 NDI Encoder NULL Pointer DereferenceKiloview · E3 Firmware | Medium6.9 |
| CVE-2026-105265 | Kiloview E3 NDI Encoder Path TraversalKiloview · E3 Firmware | Medium6.0 |
| CVE-2026-96616 | Kiloview E3 NDI Encoder Insufficient Session ExpirationKiloview · E3 Firmware | High8.3 |
| CVE-2026-111100 | Kiloview E3 NDI Encoder Missing Authentication for Critical FunctionKiloview · E3 Firmware | Medium6.9 |
| CVE-2026-109122 | Kiloview E3 NDI Encoder OS Command InjectionKiloview · E3 Firmware | Critical9.4 |
| CVE-2026-111594 | InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive InformationInterSystems · IRIS for Health | Critical9.2 |
| CVE-2026-105960 | HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter InconsistencyHMS Networks · PEAK-System Device Driver Setup | Medium6.8 |
| CVE-2026-110322 | HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer DereferenceHMS Networks · PEAK-System Device Driver Setup | Medium6.8 |
| CVE-2026-103672 | HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array IndexHMS Networks · PEAK-System Device Driver Setup | Medium6.9 |
| CVE-2026-101103 | HMS Networks PEAK-System PCAN Windows drivers Classic Buffer OverflowHMS Networks · PEAK-System Device Driver Setup | Medium6.8 |
| CVE-2026-109576 | HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds WriteHMS Networks · PEAK-System Device Driver Setup | Medium6.8 |
| CVE-2026-107777 | Thermo Fisher Torrent Suite Software Path TraversalThermo Fisher · Torrent Suite Software | High7.1 |
| CVE-2026-105667 | J4Care dcm4che Missing Authentication for Critical FunctionJ4Care · dcm4chee-arc-light | High8.7 |
| CVE-2026-105279 | J4Care dcm4che Missing Authentication for Critical FunctionJ4Care · dcm4chee-arc-light | Critical9.3 |
| CVE-2026-101021 | J4Care dcm4che Inefficient Algorithmic ComplexityJ4Care · dcm4chee-arc-light | High8.7 |
| CVE-2026-105273 | J4Care dcm4che Loop with Unreachable Exit ConditionJ4Care · dcm4chee-arc-light | High8.7 |
| CVE-2026-107621 | J4Care dcm4che Loop with Unreachable Exit ConditionJ4Care · dcm4chee-arc-light | High8.7 |
| CVE-2026-97851 | J4Care dcm4che Missing AuthorizationJ4Care · dcm4chee-arc-light | High8.8 |
| CVE-2026-105664 | Guangzhou Juan IoT Technology EseeCloud Observable Response DiscrepancyGuangzhou Juan IoT Technology Co., Ltd. · EseeCloud App | Medium6.9 |
| CVE-2026-97858 | Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object AttributesGuangzhou Juan IoT Technology Co., Ltd. · EseeCloud App | Medium6.9 |
| CVE-2026-107617 | Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded CredentialsGuangzhou Juan IoT Technology Co., Ltd. · EseeCloud App | Critical9.3 |
| CVE-2026-92817 | Inductive Automation Ignition Software Incorrect AuthorizationInductive Automation · Ignition | High8.7 |
| CVE-2026-107607 | Missing authentication for critical function in Swann Communications SWIFI-SE2KICSwann Communications · SWIFI-SE2KIC | Medium6.9 |
| CVE-2026-107606 | Missing authentication for critical function in Swann Communications SWIFI-SE2KICSwann Communications · SWIFI-SE2KIC | Medium6.9 |
| CVE-2026-107605 | Missing authentication for critical function in Swann Communications SWIFI-SE2KICSwann Communications · SWIFI-SE2KIC | Medium5.9 |
| CVE-2026-15340 | Savannah lwIP SMTP client Classic Buffer OverflowSavannah · lwIP SMTP client | Critical9.3 |
| CVE-2026-33272 | Red Lion Controls N-Tron 700 Series Authentication Bypass Using an Alternate Path or ChannelRed Lion Controls · 700 Series | Medium6.8 |
| CVE-2026-39453 | Red Lion Controls N-Tron 700 Series Reachable AssertionRed Lion Controls · 700 Series | High8.5 |
| CVE-2026-29797 | Red Lion Controls N-Tron 700 Series Download of Code Without Integrity CheckRed Lion Controls · 700 Series | High8.4 |
| CVE-2026-33367 | Red Lion Controls N-Tron 700 Series Missing Authentication for Critical FunctionRed Lion Controls · 700 Series | Critical9.3 |
| CVE-2026-28745 | Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable FormatRed Lion Controls · 700 Series | Critical9.3 |
| CVE-2026-39460 | Red Lion Controls N-Tron 700 Series Insufficiently Protected CredentialsRed Lion Controls · 700 Series | Critical9.3 |
| CVE-2026-32645 | Red Lion Controls N-Tron 700 Series Use of Hard-Coded CredentialsRed Lion Controls · 700 Series | Critical9.2 |
| CVE-2026-105278 | Grid Protection Alliance openPDC (Docker image) Use of Hard-coded CredentialsGrid Protection Alliance · openPDC (Docker image) | Critical9.3 |
| CVE-2026-104629 | Grid Protection Alliance openPDC and openHistorian Use of Externally-Controlled Input to Select Classes or CodeGrid Protection Alliance · openPDC | High7.7 |
| CVE-2026-101022 | Grid Protection Alliance openPDC and openHistorian Server-Side Request Forgery (SSRF)Grid Protection Alliance · openPDC | Medium5.3 |
| CVE-2026-85479 | Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical FunctionGrid Protection Alliance · openPDC | Medium6.9 |
| CVE-2026-105281 | Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical FunctionGrid Protection Alliance · openPDC | High8.7 |
| CVE-2026-100730 | Grid Protection Alliance openPDC and openHistorian Deserialization of Untrusted DataGrid Protection Alliance · openPDC | Critical9.3 |
| CVE-2026-105269 | Satel Netco Design Cross-site ScriptingSatel · Satel Netco Design | High8.5 |