Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,898All CVEsplus 19,118 rejected
- 382Last 24 hours2,904 in the last 7 days
- 16,786Last 30 days1,549 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 1 | 12 | 0 | 0 | 14 | 34 |
| 2025 | 5 | 2 | 5 | 0 | 0 | 12 | 20 |
| 2024 | 0 | 1 | 3 | 1 | 0 | 5 | 8 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2022 | 0 | 1 | 2 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-113697 | Reflected Cross-Site Scripting in BMC Helix Operations ManagementBMC · BMC Helix Operations Management | Medium4.8 |
| CVE-2026-113696 | Improper Authorization in BMC ITSM SmartIT Change ApprovalsBMC · BMC IT Service Management Suite | Medium5.3 |
| CVE-2026-113695 | Reflected Cross-Site Scripting in BMC ITSM SmartITBMC · BMC IT Service Management Suite | Medium4.8 |
| CVE-2026-113694 | Improper Authorization in BMC ITSM SmartIT AttachmentsBMC · BMC IT Service Management Suite | Medium5.3 |
| CVE-2026-113693 | System Account Credential Disclosure in BMC ITSMBMC · BMC IT Service Management Suite | Medium5.3 |
| CVE-2026-113692 | Path Traversal in BMC ITSMBMC · BMC IT Service Management Suite | Medium6.9 |
| CVE-2026-113691 | Stored Cross-Site Scripting in BMC ITSM Knowledge ArticlesBMC · BMC IT Service Management Suite | Medium5.1 |
| CVE-2026-113690 | Stored Cross-Site Scripting in BMC ITSM AttachmentsBMC · BMC IT Service Management Suite | Medium4.8 |
| CVE-2026-113689 | Stored Cross-Site Scripting in BMC ITSM Work NotesBMC · BMC IT Service Management Suite | Medium5.1 |
| CVE-2026-113688 | Server-Side Request Forgery in BMC ITSM SmartITBMC · BMC IT Service Management Suite | Medium5.3 |
| CVE-2026-10537 | Remote unauthenticated information disclosure and denial of service due to unauthenticated service accessBMC · Control-M/Enterprise Manager | Medium6.9 |
| CVE-2026-10538 | Improper deserialization handling in Control-M ComponentsBMC · Control-M/Enterprise Manager | High8.9 |
| CVE-2026-10539 | Unauthenticated command injection in Control-M/Server communication commandBMC · Control-M/Server | Critical9.5 |
| CVE-2026-10540 | Weak password hash protection in Control-M/Entreprise ManagerBMC · Control-M/Enterprise Manager | Medium5.6 |
| CVE-2025-55108 | BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code executionBMC · Control-M/Agent | Critical9.5 |
| CVE-2025-55118 | BMC Control-M/Agent memory corruption in SSL/TLS communicationBMC · Control-M/Agent | High8.4 |
| CVE-2025-55117 | BMC Control-M/Agent buffer overflow in SSL/TLS communicationBMC · Control-M/Agent | Medium6.3 |
| CVE-2025-55116 | BMC Control-M/Agent buffer overflow local privilege escalationBMC · Control-M/Agent | Critical9.3 |
| CVE-2025-55115 | BMC Control-M/Agent path traversal local privilege escalationBMC · Control-M/Agent | Critical9.3 |
| CVE-2025-55114 | BMC Control-M/Agent improper IP address filtering orderBMC · Control-M/Agent | Medium6.9 |
| CVE-2025-55113 | BMC Control-M/Agent unescaped NULL byte in access control list checksBMC · Control-M/Agent | Critical9.5 |
| CVE-2025-55112 | BMC Control-M/Agent hardcoded Blowfish keysBMC · Control-M/Agent | High7.6 |
| CVE-2025-55111 | BMC Control-M/Agent insecure default file permissionsBMC · Control-M/Agent | Medium5.7 |
| CVE-2025-55110 | BMC Control-M/Agent hardcoded default keystore passwordBMC · Control-M/Agent | Medium5.7 |
| CVE-2025-55109 | BMC Control-M/Agent default SSL/TLS configuration authenticated bypassBMC · Control-M/Agent | Critical9.5 |
| CVE-2025-48709 | BMC Control-M/Server cleartext database credentials in process lists and logsBMC · Control-M/Server | Medium4.8 |
| CVE-2021-35002 | BMC Track-It! Unrestricted File Upload Remote Code Execution VulnerabilityBMC · Track-It! | High8.8 |
| CVE-2021-35001 | BMC Track-It! GetData Missing Authorization Information Disclosure VulnerabilityBMC · Track-It! | Low3.1 |
| CVE-2024-1606 | HTML injection in BMC Control-MBMC · Control-M | Medium4.6 |
| CVE-2024-1605 | DLL side-loading in BMC Control-MBMC · Control-M | Medium6.6 |
| CVE-2024-1604 | Incorrect authorization in BMC Control-MBMC · Control-M | Medium6.4 |
| CVE-2022-35865 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to…BMC · Track-It! | High7.3 |
| CVE-2022-35864 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is…BMC · Track-It! | Medium5.3 |
| CVE-2022-24047 | This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to…BMC · Track-It! | Medium5.3 |