Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,106All CVEsplus 19,119 rejected
- 475Last 24 hours2,830 in the last 7 days
- 16,885Last 30 days1,550 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 38 |
| 2025 | 7 | 4 | 27 | 0 | 0 | 38 | 38 |
| Title | ||
|---|---|---|
| CVE-2025-36747 | Hardcoded FTP Credentials within the firmwareGrowatt · ShineLan-X | Critical9.4 |
| CVE-2025-36752 | Undocumented backup Account and No Password Configuration CapabilityGrowatt · ShineLan-X | Critical9.4 |
| CVE-2025-36754 | Authentication bypass on web interfaceGrowatt · ShineLan-X | Critical9.3 |
| CVE-2025-36748 | Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-XGrowatt · ShineLan-X | High8.4 |
| CVE-2025-36750 | Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-XGrowatt · ShineLan-X | High8.5 |
| CVE-2025-36753 | SWD Interface Open on Growatt ShineLan-XGrowatt · ShineLan-X | High8.6 |
| CVE-2025-36751 | Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-XGrowatt · ShineLan-X | Critical9.4 |
| CVE-2025-29757 | An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous attacker with a valid account to transfer…Growatt · https://oss.growatt.com | Critical9.4 |
| CVE-2025-27929 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-24315 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-27561 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-30257 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31147 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31360 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-30512 | Growatt Cloud portal External Control of System or Configuration SettingGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-27927 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-24297 | Growatt Cloud portal Cross-site ScriptingGrowatt · Cloud portal | Critical9.3 |
| CVE-2025-30510 | Growatt Cloud portal Insufficient Type DistinctionGrowatt · Cloud portal | Critical9.3 |
| CVE-2025-24850 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-25276 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-27565 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-27575 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31950 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31945 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-26857 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-27719 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31654 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-30514 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-27938 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-27939 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-30254 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-27568 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-24487 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31941 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31357 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31949 | Growatt Cloud portal Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-31933 | Growatt Cloud Applications Authorization Bypass Through User-Controlled KeyGrowatt · Cloud portal | Medium6.9 |
| CVE-2025-30511 | Growatt Cloud Applications Cross-site ScriptingGrowatt · Cloud portal | High8.7 |