Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,739All CVEsplus 19,141 rejected
  • 660Last 24 hours3,039 in the last 7 days
  • 17,186Last 30 days1,610 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202621100412
20251111048
20240010014
20230000003
20220000003
20210000003
20202010033

Latest CVEs

12 CVEs, newest first

CVEs, newest first
Title
CVE-2026-112067
Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)TYPO3 · Extension "Accessible Form Captcha"
Medium6.9
CVE-2026-7161
GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerabilityGeoVision Inc. · GV-IP Device Utility
Critical9.3
CVE-2026-42363
GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerabilityGeoVision Inc. · GV-IP Device Utility
Critical9.3
CVE-2025-59093
Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300dormakaba · Kaba exos 9300
High8.5
CVE-2025-7020
BYD DiLink OS Incorrect encryption Implementation of system log dumpsBYD · DiLink OS
Medium5.1
CVE-2025-25983
An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive…
Low3.4
CVE-2024-12297
Frontend Authorization Logic Disclosure VulnerabilityMoxa · EDS-508A Series
Critical9.2
CVE-2024-9138
Privilege Escalation in Cellular Router, Secure Router, and Network Security AppliancesMoxa · EDR-810 Series
High8.6
CVE-2024-5244
TP-Link Omada ER605 Reliance on Security Through Obscurity VulnerabilityTP-Link · Omada ER605
Medium5.0
CVE-2020-10286
RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoSuFactory · xArm 5 Lite, xArm 6 and xArm 7
Critical9.4
CVE-2020-10284
RVD#3321: No Authentication required to exert manual control of the robotuFactory · xArm5 Lite, xArm 6 and xArm 7
Critical9.1
CVE-2020-10277
RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalationMobile Industrial Robots A/S · MiR100
Medium6.4