Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,248All CVEsplus 19,137 rejected
- 466Last 24 hours2,749 in the last 7 days
- 16,905Last 30 days1,553 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 7 | 27 | 36 | 0 | 71 | 89 |
| 2025 | 0 | 3 | 2 | 5 | 0 | 10 | 18 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2020 | 0 | 3 | 3 | 0 | 0 | 6 | 8 |
| 2019 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2025-62347 | HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was…HCL · HCL iControl | Medium4.3 |
| CVE-2025-59874 | HCL Hive Telco Observability is affected by a Required directives missing from the CSP .HCL · Hive | High8.1 |
| CVE-2025-52606 | HCL iControl was affected by Weak Input Validation vulnerability. .HCL · iControl | Medium4.3 |
| CVE-2025-52608 | HCL iControl was affected by Missing Cookie Attributes vulnerability.HCL · iControl | Low3.1 |
| CVE-2025-52609 | HCL iControl was affected by Missing Security Headers vulnerability.HCL · iControl | Low3.7 |
| CVE-2025-52611 | HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerabilityHCL · iControl | Low3.1 |
| CVE-2025-52612 | HCL iControl was affected by Export CSV - CSV Injection vulnerability.HCL · iControl | High7.1 |
| CVE-2024-42206 | HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.HCL · iReflection | Low3.1 |
| CVE-2025-31985 | HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerHCL · BigFix Service Management (SM) | Low3.7 |
| CVE-2025-31973 | HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'HCL · BigFix Service Management (SM) | Medium4.0 |
| CVE-2025-62305 | HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactionsHCL · AION | Medium5.1 |
| CVE-2025-62317 | HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.HCL · AION | Low2.6 |
| CVE-2025-62308 | HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposedHCL · AION | Medium5.1 |
| CVE-2025-62309 | HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.HCL · AION | Low2.6 |
| CVE-2025-62312 | HCL AION is affected by a vulnerability where basic authorization tokens are used for authenticationHCL · AION | Low3.0 |
| CVE-2025-62316 | HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configuredHCL · AION | Low2.3 |
| CVE-2025-62313 | HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.HCL · AION | Medium5.4 |
| CVE-2025-62311 | HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.HCL · AION | Medium4.3 |
| CVE-2025-62310 | HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operationsHCL · AION | Medium5.4 |
| CVE-2024-30151 | HCL BigFix Service Management (SM) is susceptible to Broken Access Control VulnerabilityHCL · BigFix Service Management (SM) | High8.3 |
| CVE-2025-31960 | HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting moduleHCL · BigFix Service Management (SM) | Medium5.3 |
| CVE-2025-31975 | HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.HCL · BigFix Service Management (SM) | Low2.6 |
| CVE-2025-52613 | HCL BigFix Service Management (SM) is affected by use of a vulnerable componentHCL · BigFix Service Management (SM) | Medium4.6 |
| CVE-2025-31984 | HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerHCL · BigFix Service Management (SM) | Low3.7 |
| CVE-2025-31983 | HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP headerHCL · BigFix Service Management (SM) | Low3.7 |
| CVE-2025-62345 | HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” VulnerabilityHCL · BigFix RunBookAI | Low2.7 |
| CVE-2025-31951 | HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerabilityHCL · BigFix RunBookAI | High8.8 |
| CVE-2025-59854 | HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerabilityHCL · DFXAnalytics | Low3.1 |
| CVE-2025-59853 | HCL DFXAnalytics is affected by an Improper Error Handling vulnerabilityHCL · DFXAnalytics | Low3.1 |
| CVE-2025-59852 | HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerabilityHCL · DFXAnalytics | Low3.7 |
| CVE-2025-59851 | HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityHCL · DFXAnalytics | Low3.7 |
| CVE-2025-31970 | HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityHCL · DFXAnalytics | Medium5.3 |
| CVE-2025-52641 | Internal Filesystem Exploration vulnerabilityHCL · AION | Low2.9 |
| CVE-2025-55261 | HCL Aftermarket DPC is affected by Missing Functional Level Access ControlHCL · Aftermarket DPC | High8.1 |
| CVE-2025-55262 | HCL Aftermarket DPC is affected by SQL InjectionHCL · Aftermarket DPC | High8.3 |
| CVE-2025-55263 | HCL Aftermarket DPC is affected by Hardcoded Sensitive DataHCL · Aftermarket DPC | High7.3 |
| CVE-2025-55264 | HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password ChangeHCL · Aftermarket DPC | Medium5.5 |
| CVE-2025-55265 | HCL Aftermarket DPC is affected by File DiscoveryHCL · Aftermarket DPC | Medium6.5 |
| CVE-2025-55266 | HCL Aftermarket DPC is affected by Session FixationHCL · Aftermarket DPC | Medium5.9 |
| CVE-2025-55267 | HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerabilityHCL · Aftermarket DPC | Medium5.7 |
| CVE-2025-55268 | HCL Aftermarket DPC is affected by Spamming VulnerabilityHCL · Aftermarket DPC | Medium4.3 |
| CVE-2025-55269 | HCL Aftermarket DPC is affected by Weak Password Policy vulnerabilityHCL · Aftermarket DPC | Medium4.2 |
| CVE-2025-55270 | HCL Aftermarket DPC is affected by Improper Input ValidationHCL · Aftermarket DPC | Low3.5 |
| CVE-2025-55271 | HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerabilityHCL · Aftermarket DPC | Low3.1 |
| CVE-2025-55272 | HCL Aftermarket DPC is affected by Banner Disclosure vulnerabilityHCL · Aftermarket DPC | Low3.1 |
| CVE-2025-55273 | HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerabilityHCL · Aftermarket DPC | Medium4.3 |
| CVE-2025-55274 | HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerabilityHCL · Aftermarket DPC | Low2.6 |
| CVE-2025-55275 | HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerabilityHCL · Aftermarket DPC | Low3.7 |
| CVE-2025-55276 | HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerabilityHCL · Aftermarket DPC | Low3.1 |
| CVE-2025-55277 | HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerabilityHCL · Aftermarket DPC | Low2.6 |