Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 443Last 24 hours2,721 in the last 7 days
- 16,923Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 24 |
| 2025 | 1 | 2 | 4 | 0 | 0 | 7 | 24 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 17 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2019 | 8 | 4 | 3 | 0 | 0 | 15 | 16 |
| 2018 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2025-47415 | RECWAVE Filepath TraversalCRESTRON · TOUCHSCREENS x60, x70 series | Medium6.8 |
| CVE-2025-47416 | ConsoleFindCommandMatchListCRESTRON · TOUCHSCREEN x70 | Medium5.9 |
| CVE-2025-47421 | Privilege escalation via SCP loginCRESTRON · TOUCHSCREENS x70 | High8.6 |
| CVE-2025-47420 | User Permissions on Network APICrestron · Automate VX | High8.7 |
| CVE-2025-47419 | Non-Secure AccessCrestron · Automate VX | Critical10.0 |
| CVE-2025-47418 | RecordingCrestron · Automate VX | Medium5.3 |
| CVE-2025-47417 | Enable Debug ImagesCrestron · Automate VX | Medium5.1 |
| CVE-2023-6926 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300Crestron · AM-300 | High8.4 |
| CVE-2019-3939 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An…Crestron · Crestron AirMedia | Critical9.8 |
| CVE-2019-3938 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, and other configuration options in the file generated via…Crestron · Crestron AirMedia | High7.8 |
| CVE-2019-3937 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in…Crestron · Crestron AirMedia | High7.8 |
| CVE-2019-3936 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request…Crestron · Crestron AirMedia | High7.5 |
| CVE-2019-3935 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to…Crestron · Crestron AirMedia | Critical9.1 |
| CVE-2019-3934 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to…Crestron · Crestron AirMedia | Medium5.3 |
| CVE-2019-3933 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting…Crestron · Crestron AirMedia | Medium5.3 |
| CVE-2019-3932 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A…Crestron · Crestron AirMedia | Critical9.8 |
| CVE-2019-3931 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to…Crestron · Crestron AirMedia | High8.8 |
| CVE-2019-3930 | The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before…Crestron · Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. | Critical9.8 |
| CVE-2019-3929 | The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before…ExploitedCrestron · Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. | Critical9.8 |
| CVE-2019-3928 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the…Crestron · Crestron AirMedia | Medium5.3 |
| CVE-2019-3927 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the…Crestron · Crestron AirMedia | Critical9.8 |
| CVE-2019-3926 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A…Crestron · Crestron AirMedia | Critical9.8 |
| CVE-2019-3925 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A…Crestron · Crestron AirMedia | Critical9.8 |
| CVE-2018-5553 | Crestron DGE-100 Console Command Injection (FIXED)Crestron · DGE-100 | Critical9.8 |