Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,215All CVEsplus 18,875 rejected
- 806Last 24 hours3,103 in the last 7 days
- 17,397Last 30 days1,564 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 7 | 11 | 4 | 0 | 22 | 95 |
| 2025 | 2 | 21 | 12 | 0 | 0 | 35 | 73 |
| 2024 | 3 | 4 | 5 | 0 | 0 | 12 | 38 |
| 2023 | 11 | 7 | 4 | 0 | 0 | 22 | 26 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2020 | 0 | 4 | 0 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-101034 | Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentialsBroadcom · Symantec Ghost Solution Suite | Medium6.8 |
| CVE-2026-19810 | Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response ConsoleBroadcom · Symantec Endpoint Detection and Response | Medium5.4 |
| CVE-2026-15380 | Local privilege escalation in Symantec ITMSBroadcom · Symantec Management Suite | Medium5.1 |
| CVE-2026-15379 | Arbitrary File Read as SYSTEM in Symantec ITMSBroadcom · Symantec IT Management Suite | Medium5.1 |
| CVE-2026-11626 | Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal ToolBroadcom · Symantec Endpoint Protection CleanWipe Removal Tool | Medium5.4 |
| CVE-2026-11815 | Insecure Deserialization via MITM in Layer 7 Policy ManagerBroadcom · Layer 7 API Gateway | Medium5.3 |
| CVE-2026-8370 | Automic Automation Agent Unix privilege escalationBroadcom · Automic Automation | High8.5 |
| CVE-2026-3991 | Elevation of Privileges in Symantec Data Loss Prevention Windows EndpointBroadcom · Data Loss Prevention | High7.8 |
| CVE-2026-3862 | Cross-Site Scripting Vulnerability in SiteMinder Administrative UIBroadcom · SiteMinder | Medium4.6 |
| CVE-2025-13919 | Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows ClientBroadcom · Symantec Endpoint Protection Windows Client | Medium4.4 |
| CVE-2025-13918 | Elevation of Privileges in Symantec Endpoint Protection Windows ClientBroadcom · Symantec Endpoint Protection Windows Client | Medium6.7 |
| CVE-2025-13917 | Elevation of Privileges in Web Security Services (WSS) AgentBroadcom · Symantec Web Security Services Agent | High7.0 |
| CVE-2025-69276 | Spectrum insecure deserialiationBroadcom · DX NetOps Spectrum | Low2.3 |
| CVE-2025-69275 | Spectrum outdated java library in class-pathBroadcom · DX NetOps Spectrum | High7.1 |
| CVE-2025-69274 | Spectrum broken authorization schemeBroadcom · DX NetOps Spectrum | Low2.3 |
| CVE-2025-69273 | Spectrum broken authenticationBroadcom · DX NetOps Spectrum | High8.7 |
| CVE-2025-69272 | Spectrum password returned in clearBroadcom · DX NetOps Spectrum | Medium5.3 |
| CVE-2025-69271 | Spectrum basic authentication in useBroadcom · DX NetOps Spectrum | Low2.3 |
| CVE-2025-69270 | Spectrum session token in URLBroadcom · DX NetOps Spectrum | Low2.3 |
| CVE-2025-69269 | Spectrum command injection in NCM serviceBroadcom · DX NetOps Spectrum | High7.1 |
| CVE-2025-69268 | Spectrum reflected XSSBroadcom · DX NetOps Spectrum | Medium5.3 |
| CVE-2025-69267 | Spectrum directory path traversalBroadcom · DX NetOps Spectrum | High8.8 |
| CVE-2025-31649 | Dell ControlVault3 ControlVault WBDI Driver hard-coded password vulnerabilityBroadcom · BCM5820X | High8.7 |
| CVE-2025-31361 | Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter privilege escalation vulnerabilityBroadcom · BCM5820X | High8.7 |
| CVE-2025-36463 | Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityBroadcom · BCM5820X | High7.3 |
| CVE-2025-36462 | Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityBroadcom · BCM5820X | High7.3 |
| CVE-2025-36461 | Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityBroadcom · BCM5820X | High7.3 |
| CVE-2025-36460 | Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerabilityBroadcom · BCM5820X | High7.3 |
| CVE-2025-32089 | Dell ControlVault3 CvManager_SBI buffer overflow vulnerabilityBroadcom · BCM5820X | High8.8 |
| CVE-2025-36553 | Dell ControlVault3 CvManager buffer overflow vulnerabilityBroadcom · BCM5820X | High8.8 |
| CVE-2025-10847 | DX UIM Probe Improper ACL Handling RCEBroadcom · Unified Infrastructure Management | High8.4 |
| CVE-2025-9059 | Elevation of Privileges Vulnerability in IT Management SuiteBroadcom · 8.6.IT Management Suite | High8.8 |
| CVE-2025-8661 | Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1Broadcom · Symantec PGP Encryption | Medium4.6 |
| CVE-2025-8660 | Privilege Escalation in Symantec PGP Encryption 11.0.1Broadcom · Symantec PGP Encryption | Medium5.6 |
| CVE-2025-7397 | CLI history displays inline passwordsBroadcom · Brocade ASCG | Medium6.8 |
| CVE-2025-6391 | JSON Web Token (JWT) Exposure in Log FilesBroadcom · Brocade ASCG | High7.1 |
| CVE-2025-7398 | Medium Strength Cipher Suites detected on port on ports 9000 and 8036Broadcom · Brocade ASCG | High8.6 |
| CVE-2025-6392 | Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)Broadcom · Brocade SANnav | Medium6.7 |
| CVE-2025-6390 | Cleartext storage of sensitive information in Brocade SANnav server audit logs.Broadcom · Brocade SANnav | Medium5.1 |
| CVE-2025-4662 | Plaintext security passwords are logged in the audit logs while executing openssl cmdBroadcom · Brocade SANnav | Medium5.1 |
| CVE-2025-4663 | Denial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerabilityBroadcom · Brocade Fabric OS | Medium6.8 |
| CVE-2025-24508 | Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management SuiteBroadcom · Symantec IT Management Suite | Medium6.4 |
| CVE-2025-5333 | Unauthenticated Remote Code Execution in IT Management SuiteBroadcom · Symantec IT Management Suite | Critical9.5 |
| CVE-2025-24919 | Dell ControlVault3/ControlVault3 Plus deserialization of untrusted input vulnerabilityBroadcom · BCM5820X | High8.1 |
| CVE-2025-25215 | Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityBroadcom · BCM5820X | High8.8 |
| CVE-2025-25050 | Dell ControlVault3/ControlVault3 Plus cv_upgrade_sensor_firmware out-of-bounds write vulnerabilityBroadcom · BCM5820X | High8.8 |
| CVE-2025-24922 | Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerabilityBroadcom · BCM5820X | High8.8 |
| CVE-2025-24311 | Dell ControlVault3/ControlVault3 Plus cv_send_blockdata out-of-bounds read vulnerabilityBroadcom · BCM5820X | High8.4 |
| CVE-2025-4971 | Broadcom Automic Automation Agent Unix privilege escalationBroadcom · Automic Automation | High8.5 |
| CVE-2025-24507 | This vulnerability allows appliance compromise at boot time.Broadcom · Symantec Privileged Access Management | High8.9 |