Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,959All CVEsplus 19,118 rejected
- 394Last 24 hours2,829 in the last 7 days
- 16,813Last 30 days1,548 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 15 | 5 | 1 | 0 | 24 | 60 |
| 2025 | 0 | 28 | 6 | 0 | 0 | 34 | 36 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2023 | 0 | 0 | 1 | 1 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-112373 | H3C Magic NX15 usrlist sub_416874 stack-based overflowH3C · Magic NX15 | High7.1 |
| CVE-2026-112372 | H3C Magic NX15 upload importprofile path traversalH3C · Magic NX15 | Medium5.1 |
| CVE-2026-112371 | H3C Magic NX15 RPC esps write code injectionH3C · Magic NX15 | Critical9.4 |
| CVE-2026-112370 | H3C Magic NX15 usrlist sub_416874 os command injectionH3C · Magic NX15 | Critical9.4 |
| CVE-2026-65197 | H3C G3/G5 HDM Firmware Verification Key ReplacementH3C · HDM Family-A G5 | Low3.1 |
| CVE-2023-54405 | H3C CVM Unauthenticated File Upload via fileUpload/upload TokenH3C · CVM | Critical9.3 |
| CVE-2026-18902 | H3C NX15 esps repeaterproc command injectionH3C · NX15 | High8.6 |
| CVE-2026-18901 | H3C NX15 Web API esps service.add routineH3C · NX15 | High8.6 |
| CVE-2026-18900 | H3C NX15 Backend RPC esps file.exec os command injectionH3C · NX15 | High8.6 |
| CVE-2026-18814 | H3C NX15 esps reload.reload_config command injectionH3C · NX15 | High8.6 |
| CVE-2026-18813 | H3C NX15 esps delete command injectionH3C · NX15 | High8.6 |
| CVE-2026-18812 | H3C NX15 esps esps.ipv6.wan command injectionH3C · NX15 | High8.6 |
| CVE-2026-18811 | H3C NX15 esps add command injectionH3C · NX15 | High8.6 |
| CVE-2026-18810 | H3C NX15 networkSetup missing authenticationH3C · NX15 | Medium6.9 |
| CVE-2026-15907 | H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injectionH3C · SecPath F1000-C8300 | Medium6.9 |
| CVE-2026-15479 | H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recoveryH3C · NX15 | Medium6.9 |
| CVE-2026-10259 | H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflowH3C · Magic B0 | High8.7 |
| CVE-2026-9393 | H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflowH3C · Magic B0 | High8.7 |
| CVE-2026-8764 | H3C Magic B3 aspForm UpdateWanParams buffer overflowH3C · Magic B3 | High8.6 |
| CVE-2026-6581 | H3C Magic B1 aspForm SetMobileAPInfoById buffer overflowH3C · Magic B1 | High8.7 |
| CVE-2026-6563 | H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflowH3C · Magic B1 | High8.7 |
| CVE-2026-6560 | H3C Magic B0 aspForm Edit_BasicSSID buffer overflowH3C · Magic B0 | High8.7 |
| CVE-2026-3943 | H3C ACG1000-AK230 aaa_portal_auth_local_submit command injectionH3C · ACG1000-AK230 | Medium6.9 |
| CVE-2026-3701 | H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflowH3C · Magic B1 | High8.7 |
| CVE-2025-14196 | H3C Magic B1 aspForm sub_44de0 buffer overflowH3C · Magic B1 | High8.7 |
| CVE-2025-14015 | H3C Magic B0 aspForm EditWlanMacList buffer overflowH3C · Magic B0 | High8.7 |
| CVE-2025-10942 | H3C Magic B3 aspForm EditMacList buffer overflowH3C · Magic B3 | High8.7 |
| CVE-2025-8907 | H3C M2 NAS Webserver Configuration unnecessary privilegesH3C · M2 NAS | High7.3 |
| CVE-2025-6091 | H3C GR-3000AX aspForm UpdateIpv6Params buffer overflowH3C · GR-3000AX | High8.7 |
| CVE-2025-6090 | H3C GR-5400AX aspForm UpdateIpv6params buffer overflowH3C · GR-5400AX | High8.7 |
| CVE-2025-5162 | H3C SecCenter SMP-E1114P02 importFile unrestricted uploadH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5161 | H3C SecCenter SMP-E1114P02 download operationDailyOut path traversalH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5160 | H3C SecCenter SMP-E1114P02 download path traversalH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5159 | H3C SecCenter SMP-E1114P02 download path traversalH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5158 | H3C SecCenter SMP-E1114P02 downloadSoftware path traversalH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5157 | H3C SecCenter SMP-E1114P02 fileContent path traversalH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5156 | H3C GR-5400AX aspForm EditWlanMacList buffer overflowH3C · GR-5400AX | High8.7 |
| CVE-2025-4998 | H3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of serviceH3C · Magic R200G | High7.1 |
| CVE-2025-4997 | H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of serviceH3C · R2+ProG | High7.1 |
| CVE-2025-4446 | H3C GR-5400AX aspForm Edit_List_SSID buffer overflowH3C · GR-5400AX | High8.6 |
| CVE-2025-4440 | H3C GR-1800AX aspForm EnableIpv6 buffer overflowH3C · GR-1800AX | High8.6 |
| CVE-2025-3854 | H3C GR-3000AX HTTP POST Request aspForm Edit_List_SSID buffer overflowH3C · GR-3000AX | High8.6 |
| CVE-2025-3546 | H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injectionH3C · Magic NX15 | High8.6 |
| CVE-2025-3545 | H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injectionH3C · Magic NX15 | High8.6 |
| CVE-2025-3544 | H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injectionH3C · Magic NX15 | High8.6 |
| CVE-2025-3543 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injectionH3C · Magic NX15 | High8.6 |
| CVE-2025-3542 | H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injectionH3C · Magic NX15 | High8.6 |
| CVE-2025-3541 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injectionH3C · Magic NX15 | High8.6 |
| CVE-2025-3540 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injectionH3C · Magic NX15 | High8.6 |
| CVE-2025-3539 | H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injectionH3C · Magic NX15 | High8.6 |