Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,117All CVEsplus 19,119 rejected
- 473Last 24 hours2,793 in the last 7 days
- 16,879Last 30 days1,552 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 7 | 4 | 0 | 0 | 12 | 73 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 61 |
| 2024 | 0 | 2 | 1 | 0 | 0 | 3 | 61 |
| 2023 | 0 | 5 | 3 | 0 | 0 | 8 | 58 |
| 2022 | 1 | 5 | 6 | 0 | 0 | 12 | 50 |
| 2021 | 3 | 15 | 5 | 0 | 0 | 23 | 38 |
| 2020 | 3 | 2 | 1 | 0 | 0 | 6 | 15 |
| 2019 | 1 | 4 | 4 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-56428 | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An…Bosch · BSH ELP (Electronic Platform) Modules | High8.1 |
| CVE-2024-58330 | A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data.Bosch · Camera Firmware | High7.5 |
| CVE-2024-58023 | Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.Bosch · Bosch Configuration Manager | High8.4 |
| CVE-2024-33618 | Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network…Bosch · BVMS | High7.5 |
| CVE-2025-32063 | Enabling SSH server on Infotainment ECUBosch · Infotainment system ECU | Medium6.8 |
| CVE-2025-32062 | Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch · Infotainment system ECU | High8.8 |
| CVE-2025-32061 | Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch · Infotainment system ECU | High8.8 |
| CVE-2025-32060 | Absence of Kernel Module Signature Verification on Linux System of Infotainment ECUBosch · Infotainment system ECU | Medium6.7 |
| CVE-2025-32059 | Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUBosch · Infotainment system ECU | High8.8 |
| CVE-2025-32058 | Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECUBosch · Infotainment system ECU | Critical9.3 |
| CVE-2025-32057 | Misconfigured SSL/TLS communication of Redbend service for Infotainment ECUBosch · Infotainment system ECU | Medium6.5 |
| CVE-2025-32056 | Anti-Theft Bypass for Infotainment ECUBosch · Infotainment system ECU | Medium4.0 |
| CVE-2023-32228 | A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user.Bosch · AMS | Medium4.6 |
| CVE-2024-25002 | Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.Bosch · Network Synchronizer Enterprise | High8.8 |
| CVE-2023-49722 | Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network.Bosch · BCC101 | High8.3 |
| CVE-2022-41677 | An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like…Bosch · Camera Firmware | Medium5.3 |
| CVE-2023-35867 | An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of…Bosch · BVMS | Medium5.9 |
| CVE-2023-32230 | An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of…Bosch · Video Recording Manager | High7.5 |
| CVE-2023-39509 | A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS…Bosch · Camera Firmware | High7.2 |
| CVE-2023-29241 | Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to…Bosch · BIS | High8.1 |
| CVE-2023-28175 | Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal…Bosch · BVMS | High7.1 |
| CVE-2023-32229 | Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when…Bosch · Camera Firmware | Medium4.9 |
| CVE-2022-47648 | An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or…Bosch · B420 | High7.6 |
| CVE-2022-40184 | Stored Cross Site Scripting (XSS) in VIDEOJET multi 4000Bosch · VIDEOJET multi 4000 | Medium5.1 |
| CVE-2022-40183 | Reflected Cross Site Scripting (XSS) in VIDEOJET multi 4000Bosch · VIDEOJET multi 4000 | Medium5.8 |
| CVE-2022-32540 | Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows…Bosch · BVMS | High7.4 |
| CVE-2022-36302 | File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources,…Bosch · BF-OS | High8.8 |
| CVE-2022-36301 | BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password.Bosch · BF-OS | Critical9.8 |
| CVE-2022-32536 | Privilege EscalationBosch · PRA-ES8P2S | High8.8 |
| CVE-2022-32534 | OS Command InjectionBosch · PRA-ES8P2S | High8.8 |
| CVE-2022-32535 | Web server runs as rootBosch · PRA-ES8P2S | Medium4.8 |
| CVE-2021-23851 | Buffer Overflow vulnerability in the recovery image web-based interfaceBosch · CPP Firmware | Medium6.8 |
| CVE-2021-23850 | Buffer Overflow vulnerability in the recovery image telnet serverBosch · CPP Firmware | Medium6.8 |
| CVE-2021-23843 | Lack of authentication mechanisms on the deviceBosch · AMS | High8.8 |
| CVE-2021-23842 | Use of Hard-coded Cryptographic KeyBosch · AMS | Medium5.7 |
| CVE-2021-23862 | Authenticated Remote Code ExecutionBosch · BVMS | High7.2 |
| CVE-2021-23861 | Possible Access to Debug Functions in Bosch VRM / BVMSBosch · BVMS | Medium6.5 |
| CVE-2021-23860 | Reflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMSBosch · BVMS | Medium5.0 |
| CVE-2021-23859 | Denial of Service and Authentication Bypass Vulnerability in multiple Bosch productsBosch · BVMS | Critical9.1 |
| CVE-2021-23849 | Cross Site Request Forgery (CSRF) vulnerability in web based management interfaceBosch · CPP Firmware | High7.5 |
| CVE-2021-23846 | B426 Credential DisclosureBosch · B426 Firmware | High8.8 |
| CVE-2021-23845 | B426 Web Configuration Authentication BypassBosch · B426 Firmware | High8.0 |
| CVE-2021-23854 | Reflected XSS in page parameterBosch · CPP Firmware | High8.3 |
| CVE-2021-23847 | Unauthenticated Information Extraction VulnerabilityBosch · CPP Firmware | Critical9.8 |
| CVE-2021-23853 | Improper Input Validation of HTTP HeadersBosch · CPP Firmware | High8.3 |
| CVE-2021-23848 | Reflected XSS in URL handlerBosch · CPP Firmware | High8.3 |
| CVE-2021-23852 | Denial of Service (DoS) due to invalid web parameterBosch · CPP Firmware | Medium4.9 |
| CVE-2020-6790 | Uncontrolled Search Path Element in Bosch Video Streaming Gateway InstallerBosch · Video Streaming Gateway | High7.8 |
| CVE-2020-6789 | Uncontrolled Search Path Element in Bosch Monitor Wall InstallerBosch · Monitor Wall | High7.8 |
| CVE-2020-6788 | Uncontrolled Search Path Element in Bosch Configuration Manager InstallerBosch · Configuration Manager | High7.8 |