Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,955All CVEsplus 19,141 rejected
- 349Last 24 hours3,209 in the last 7 days
- 17,025Last 30 days1,575 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 0 | 0 | 0 | 3 | 13 |
| 2025 | 1 | 0 | 1 | 0 | 0 | 2 | 10 |
| 2024 | 0 | 2 | 2 | 0 | 0 | 4 | 8 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 4 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2019 | 1 | 0 | 0 | 0 | 0 | 1 | 2 |
| 2018 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-113736 | D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty passwordPublic exploitD-Link · DHP-W610AV | Critical9.3 |
| CVE-2026-84398 | CareCam CM2507 Empty Password in Configuration FileCareCam · HMT.CM2507 Firmware | High8.7 |
| CVE-2025-15679 | BMC root account active without password on BullSequana XH3406 and XH3515Bull · BullSequana XH3406 | High7.3 |
| CVE-2025-9276 | Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass VulnerabilityCockroach Labs · cockroach-k8s-request-cert | Critical9.8 |
| CVE-2025-4395 | Medtronic MyCareLink Patient Monitor Empty Password VulnerabilityMedtronic · MyCareLink Patient Monitor 24950 | Medium6.8 |
| CVE-2024-35137 | IBM Security Access Manager Docker information disclosureIBM · Security Verify Access Docker | Medium6.2 |
| CVE-2024-4106 | A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is…Yokogawa Electric Corporation · FAST/TOOLS | Medium5.3 |
| CVE-2024-28744 | The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An…Public exploitFURUNO SYSTEMS Co.,Ltd. · ACERA 9010-08 | High8.8 |
| CVE-2023-43016 | IBM Security Access Manager Container unauthorized accessPublic exploitIBM · Security Verify Access Appliance | High7.3 |
| CVE-2023-39439 | SAP Commerce accepts empty passphrases.SAP_SE · SAP Commerce | High8.8 |
| CVE-2020-29478 | CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial…CA Technologies, A Broadcom Company · CA Service Catalog | High7.5 |
| CVE-2019-5021 | Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a…Alpine Linux | Critical9.8 |
| CVE-2018-17914 | InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could…unknown · InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition) | Critical9.8 |