Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,189All CVEsplus 18,875 rejected
- 800Last 24 hours3,212 in the last 7 days
- 17,393Last 30 days1,564 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 3 | 0 | 0 | 4 | 337 |
| 2025 | 0 | 1 | 4 | 0 | 2 | 7 | 333 |
| 2024 | 2 | 4 | 15 | 0 | 0 | 21 | 326 |
| 2023 | 4 | 14 | 18 | 1 | 0 | 37 | 305 |
| 2022 | 1 | 11 | 14 | 2 | 0 | 28 | 268 |
| 2021 | 3 | 22 | 26 | 2 | 0 | 53 | 240 |
| 2020 | 1 | 37 | 45 | 3 | 0 | 86 | 187 |
| 2019 | 1 | 23 | 28 | 2 | 0 | 54 | 101 |
| 2018 | 2 | 16 | 22 | 7 | 0 | 47 | 47 |
| Title | ||
|---|---|---|
| CVE-2026-107171 | An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.Trellix · Trellix Agent | Medium6.9 |
| CVE-2026-12588 | An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger…Trellix · Trellix HX Console | Medium6.0 |
| CVE-2025-7958 | A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web…Trellix · Trellix Network Security NX, EX, FX, AX, and CMS | High7.1 |
| CVE-2025-14963 | A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges.…Trellix · Endpoint HX Agent (xAgent) | Medium6.2 |
| CVE-2025-0664 | A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library.…Trellix · Trellix Endpoint Security (HX) Agent | Medium6.7 |
| CVE-2025-5967 | A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field,…Trellix · Endpoint Security HX | Medium5.3 |
| CVE-2025-3773 | A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract…Trellix · System Information Reporter | None0.0 |
| CVE-2025-3722 | A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post…Trellix · System Information Reporter | None0.0 |
| CVE-2025-3771 | A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with…Trellix · System Information Reporter | High7.2 |
| CVE-2025-0618 | A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event…Trellix · FireEye EDR HX | Medium6.5 |
| CVE-2025-0617 | An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger…Trellix · Trellix HX Console | Medium5.9 |
| CVE-2024-5955 | Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated attacker to craft…Trellix · ePO Onprem Sp1 Update4 | Medium5.4 |
| CVE-2024-9679 | A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials.Trellix · DLP Extension | Medium5.3 |
| CVE-2024-9678 | An SQL Injection vulnerability existed in DLP Extension 11.11.1.3. The vulnerability allowed an attacker to perform arbitrary SQL queries potentially leading…Trellix · DLP Extension | Medium4.9 |
| CVE-2024-11482 | A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection,…Trellix · Trellix Enterprise Security Manager (ESM) | Critical9.8 |
| CVE-2024-11481 | A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure…Trellix · Trellix Enterprise Security Manager (ESM) | High8.2 |
| CVE-2024-5957 | This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.Trellix · Intrusion Prevention System (IPS) Manager | Medium6.3 |
| CVE-2024-5956 | This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with…Trellix · Intrusion Prevention System (IPS) Manager | Medium6.5 |
| CVE-2024-7608 | An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.Trellix · Trellix NX, EX, AX, FX, CMS and IVX | Medium5.9 |
| CVE-2024-6398 | An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block…Skyhigh · Secure Web Gateway | Medium4.3 |
| CVE-2024-5731 | A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by…Trellix · Intrusion Prevention System (IPS) Manager | Medium6.8 |
| CVE-2024-5671 | Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the…Trellix · Intrusion Prevention System (IPS) Manager | Critical9.8 |
| CVE-2024-4176 | An Cross site scripting vulnerability in the EDR XConsole before this release allowed an attacker to potentially leverage an XSS/HTML-Injection using command…Trellix · Trellix EDR UI (XConsole) | Medium4.1 |
| CVE-2024-4844 | Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin…Trellix · ePolicy Orchestrator | High7.5 |
| CVE-2024-4843 | ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate…Trellix · ePolicy Orchestrator | Medium4.3 |
| CVE-2024-0313 | A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is…Skyhigh · Skyhigh Client Proxy | Medium5.5 |
| CVE-2024-0312 | A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.Skyhigh · Skyhigh Client Proxy | Medium5.5 |
| CVE-2024-0311 | A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.Skyhigh · Skyhigh Client Proxy | Medium5.5 |
| CVE-2023-6072 | A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard…Trellix · Trellix Central Management (CM) | Medium4.6 |
| CVE-2024-0310 | A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header…Trellix · Trellix Endpoint Security (ENS) Web Control | Medium6.1 |
| CVE-2024-0213 | A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service…Trellix · Trellix Agent (TA) | High8.2 |
| CVE-2024-0206 | A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially…Trellix · Anti-Malware Engine | High7.1 |
| CVE-2023-6071 | An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute…Trellix · ESM | High8.4 |
| CVE-2023-6070 | A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially…Trellix · Trellix Enterprise Security Manager (ESM) | Medium4.3 |
| CVE-2023-5607 | An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises ePO servers, prior to…Trellix · Trellix Application and Change Control (TACC) | High8.4 |
| CVE-2023-5445 | An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL parameter for the…Trellix · ePolicy Orchestrator | Medium5.4 |
| CVE-2023-5444 | CSRF in ePO leading to privilege escalationTrellix · ePolicy Orchestrator | High8.0 |
| CVE-2023-6119 | An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that…Trellix · GetSusp | Medium6.5 |
| CVE-2023-3665 | A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment…Trellix · Trellix Endpoint Security | Medium5.5 |
| CVE-2023-4814 | A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does…Trellix · Data Loss Prevention Endpoint for Windows | High7.1 |
| CVE-2023-4400 | A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release…Skyhigh Security · Skyhigh Secure Web Gateway (SWG) | Medium6.2 |
| CVE-2023-3267 | When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without…CyberPower · PowerPanel Enterprise | Critical9.1 |
| CVE-2023-3266 | A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP…CyberPower · PowerPanel Enterprise | Critical9.8 |
| CVE-2023-3265 | An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login…CyberPower · PowerPanel Enterprise | Critical9.8 |
| CVE-2023-3264 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database.…Dataprobe · iBoot PDU | Medium6.7 |
| CVE-2023-3263 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of…Dataprobe · iBoot PDU | High7.5 |
| CVE-2023-3262 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres…Dataprobe · iBoot PDU | Medium6.7 |
| CVE-2023-3261 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful…Dataprobe · iBoot PDU | High7.5 |
| CVE-2023-3260 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An…Dataprobe · iBoot PDU | High7.2 |
| CVE-2023-3259 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the…Dataprobe · iBoot PDU | Critical9.8 |