Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,956All CVEsplus 19,141 rejected
- 254Last 24 hours3,184 in the last 7 days
- 16,914Last 30 days1,564 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 1 | 1 | 0 | 0 | 3 | 15 |
| 2025 | 1 | 0 | 0 | 0 | 0 | 1 | 12 |
| 2024 | 1 | 0 | 3 | 0 | 0 | 4 | 11 |
| 2023 | 1 | 1 | 0 | 0 | 0 | 2 | 7 |
| 2022 | 0 | 1 | 2 | 0 | 0 | 3 | 5 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 2 |
| 2020 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-122118 | In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used.…Yealink · AVHub | High7.4 |
| CVE-2026-71851 | crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency ChainPublic exploitbrix · crypto-js | Critical9.0 |
| CVE-2024-54017 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All…Siemens · SIPROTEC 5 6MD84 (CP300) | Medium6.9 |
| CVE-2025-3895 | Low token entropy in MegaBIPJan Syski · MegaBIP | Critical9.1 |
| CVE-2024-52616 | Avahi: avahi wide-area dns predictable transaction idsavahi · avahi | Medium5.3 |
| CVE-2024-51720 | Vulnerabilities in SecuSUITE Server Components Impact SecuSUITEBlackBerry · SecuSUITE | Medium4.8 |
| CVE-2024-6890 | Journyx Unauthenticated Password Reset BruteforcePublic exploitJournyx · Journyx (jtime) | Critical9.8 |
| CVE-2023-6951 | A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key…DJI · Mavic 3 Pro | Medium6.6 |
| CVE-2022-24402 | Intentionally weakened effective strength in TETRA TEA1ETSI · TETRA Standard | High8.8 |
| CVE-2023-39979 | MXsecurity Authentication BypassMoxa · MXsecurity Series | Critical9.8 |
| CVE-2022-20941 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to…Cisco · Cisco Firepower Management Center | Medium5.3 |
| CVE-2022-33707 | Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.Samsung Mobile · FindMyMobile | Medium5.3 |
| CVE-2022-22517 | Communication Components in multiple CODESYS products vulnerable to communication channel disruptionCODESYS · CODESYS Control RTE (SL) | High7.5 |
| CVE-2021-21955 | An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h.…Anker | High7.7 |
| CVE-2020-7566 | A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the…Modicon M221, all references, all versions | High7.1 |