Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,645All CVEsplus 18,889 rejected
- 402Last 24 hours2,969 in the last 7 days
- 17,128Last 30 days1,580 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 39 |
| 2025 | 27 | 0 | 8 | 4 | 0 | 39 | 39 |
| Title | ||
|---|---|---|
| CVE-2025-12603 | /etc/timezone can be Arbitrarily WrittenAzure Access Technology · BLU-IC2 | Low2.3 |
| CVE-2025-12602 | /etc/avahi/services/z9.service can be Arbitrarily WrittenAzure Access Technology · BLU-IC2 | Low2.3 |
| CVE-2025-12601 | Denial of Service Due to SlowLorisAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12600 | Web UI MalfunctionAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12599 | Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)Azure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12554 | Missing Security HeadersAzure Access Technology · BLU-IC2 | Medium6.9 |
| CVE-2025-12553 | Server Certificate Verification DisabledAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12552 | Insufficient Password PolicyAzure Access Technology · BLU-IC2 | Medium6.9 |
| CVE-2025-12517 | Credits Page not Matching Versions in Use in the FirmwareAzure Access Technology · BLU-IC2 | Low2.1 |
| CVE-2025-12516 | Lack of Graceful Error Handling - HTTP 5xx ErrorAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12515 | Systemic Internal Server Errors - HTTP 500 ResponseAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12479 | Systemic Lack of Cross-Site Request Forgery (CSRF) Token ImplementationAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12478 | Non-Compliant TLS ConfigurationAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12477 | Server Version DisclosureAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12476 | Resource Lacking AuthNAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12425 | Local Privilege EscalationAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12424 | Privilege Escalation through SUID-bit BinaryAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12423 | Denial of Service - Protocol ManipulationAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12422 | Vulnerable Upgrade Feature (Arbitrary File Write)Azure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12365 | Error Messages Wrapped In HTTP HeaderAzure Access Technology · BLU-IC2 | Medium6.9 |
| CVE-2025-12364 | Weak Password PolicyAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12363 | Email Password DisclosureAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12285 | Missing Initial Password ChangeAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12284 | Lack of Input ValidationAzure Access Technology · BLU-IC2 | Medium6.9 |
| CVE-2025-12275 | Mail Configuration File Manipulation + Command ExecutionAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12278 | Logout Functionality not WorkingAzure Access Technology · BLU-IC2 | Medium6.9 |
| CVE-2025-12221 | CSRF Token not Properly ImplementedAzure Access Technology · BLU-IC2 | Low2.1 |
| CVE-2025-12220 | Busybox 1.31.1 - Multiple Known VulnerabilitiesAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12219 | Vulnerable Components in Azure Access OSAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12218 | Weak Default CredentialsAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12217 | SNMP Default Community String (public)Azure Access Technology · BLU-IC2 | Medium6.9 |
| CVE-2025-12216 | Malicious / Malformed App can be Installed but not UninstalledAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12176 | Undocumented Administrative AccountsAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12114 | Serial Console EnabledAzure Access Technology · BLU-IC2 | Medium5.2 |
| CVE-2025-12104 | Incorrect Content-Type HeaderAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-12031 | HTTP Security Misconfiguration - Lacking Secure and HTTPOnly AttributeAzure Access Technology · BLU-IC2 | Medium5.3 |
| CVE-2025-12001 | Incorrect Content-Type HeaderAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-11925 | Incorrect Content-Type HeaderAzure Access Technology · BLU-IC2 | Critical10.0 |
| CVE-2025-11832 | APIs Lack Rate LimitingAzure Access Technology · BLU-IC2 | Critical10.0 |