Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,262All CVEsplus 18,875 rejected
- 736Last 24 hours3,095 in the last 7 days
- 17,434Last 30 days1,577 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 93 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 93 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 93 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 93 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 93 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 93 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 93 |
| 2019 | 9 | 21 | 10 | 1 | 0 | 41 | 93 |
| 2018 | 12 | 27 | 13 | 0 | 0 | 52 | 52 |
| Title | ||
|---|---|---|
| CVE-2018-17937 | gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to…ICS-CERT · gpsd and microjson (Open Source Project) | High8.8 |
| CVE-2019-6565 | Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be…ICS-CERT · Moxa IKS, EDS | Medium6.1 |
| CVE-2019-6563 | Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a…ICS-CERT · Moxa IKS, EDS | Critical9.8 |
| CVE-2019-6561 | Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.ICS-CERT · Moxa IKS, EDS | High8.8 |
| CVE-2019-6559 | Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.ICS-CERT · Moxa IKS, EDS | Medium6.5 |
| CVE-2019-6557 | Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.ICS-CERT · Moxa IKS, EDS | Critical9.8 |
| CVE-2019-6528 | PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27,…ICS-CERT · PSI GridConnect GmbH (formerly known as PSI Nentec GmbH) Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy. | High8.8 |
| CVE-2019-6524 | Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via…ICS-CERT · Moxa IKS, EDS | Critical9.8 |
| CVE-2019-6522 | Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to…ICS-CERT · Moxa IKS, EDS | Critical9.1 |
| CVE-2019-6520 | Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.ICS-CERT · Moxa IKS, EDS | High7.5 |
| CVE-2019-6518 | Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.ICS-CERT · Moxa IKS, EDS | High7.5 |
| CVE-2019-6551 | Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the…ICS-CERT · Pangea Communications Internet FAX ATA | High7.5 |
| CVE-2019-6547 | Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to…ICS-CERT · Delta Industrial Automation CNCSoft | Medium5.5 |
| CVE-2019-6555 | Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker…ICS-CERT · Cscape | High7.8 |
| CVE-2018-19008 | The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the…ICS-CERT · ABB CP400 Panel Builder TextEditor 2.0 | High7.8 |
| CVE-2019-6545 | AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An…ICS-CERT · AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update | High7.5 |
| CVE-2019-6543 | AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is…ICS-CERT · AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update | Critical9.8 |
| CVE-2019-6541 | A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code execution. Mat Powell, Ziad…ICS-CERT · WECON LeviStudioU | High7.8 |
| CVE-2019-6539 | Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code…ICS-CERT · WECON LeviStudioU | High7.8 |
| CVE-2019-6537 | Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings within project files.…ICS-CERT · WECON LeviStudioU | High7.8 |
| CVE-2018-19020 | When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a…ICS-CERT · CX-Supervisor | Medium5.0 |
| CVE-2018-19018 | An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files. An…ICS-CERT · CX-Supervisor | High7.3 |
| CVE-2019-6549 | An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166)…ICS-CERT · PR100088 Modbus gateway | High7.2 |
| CVE-2019-6533 | Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to…ICS-CERT · PR100088 Modbus gateway | Critical9.1 |
| CVE-2019-6527 | PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user…ICS-CERT · PR100088 Modbus gateway | Critical9.8 |
| CVE-2019-6517 | BD FACSLyric Research Use Only, Windows 10 Professional Operating System, U.S. and Malaysian Releases, between November 2017 and November 2018 and BD FACSLyric…ICS-CERT · BD FACSLyric | Medium6.8 |
| CVE-2018-19000 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.ICS-CERT · LCDS Laquis SCADA | Medium5.3 |
| CVE-2018-18998 | LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges.ICS-CERT · LCDS Laquis SCADA | Critical9.8 |
| CVE-2018-18996 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute…ICS-CERT · LCDS Laquis SCADA | Critical9.8 |
| CVE-2018-18992 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the…ICS-CERT · LCDS Laquis SCADA | High8.8 |
| CVE-2018-18990 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this…ICS-CERT · LCDS Laquis SCADA | Medium5.3 |
| CVE-2018-19004 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration.ICS-CERT · LCDS Laquis SCADA | Low3.3 |
| CVE-2018-18988 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code…ICS-CERT · LCDS Laquis SCADA | High8.8 |
| CVE-2018-19014 | Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Log files are…ICS-CERT · Dräger Infinity Delta | Medium6.5 |
| CVE-2018-19010 | Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network…ICS-CERT · Dräger Infinity Delta | Medium6.5 |
| CVE-2018-19012 | Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific…ICS-CERT · Dräger Infinity Delta | High7.8 |
| CVE-2018-19015 | An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted…ICS-CERT · CX-Supervisor | High7.3 |
| CVE-2018-19019 | A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially crafted…ICS-CERT · CX-Supervisor | High7.3 |
| CVE-2018-19017 | Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application fails to…ICS-CERT · CX-Supervisor | High8.8 |
| CVE-2018-19013 | An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted…ICS-CERT · CX-Supervisor | Medium5.0 |
| CVE-2018-19011 | CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the…ICS-CERT · CX-Supervisor | High8.8 |
| CVE-2018-17930 | A stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock Version 7.2.7.4 and prior, which may allow remote code execution.ICS-CERT · Teledyne DALSA Sherlock | Critical9.8 |
| CVE-2018-14805 | ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the…ICS-CERT · ABB eSOMS | Critical9.8 |
| CVE-2018-14795 | DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files.ICS-CERT · DeltaV | High8.8 |
| CVE-2018-14793 | DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code…ICS-CERT · DeltaV | High8.8 |
| CVE-2017-16748 | An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a…ICS-CERT · Niagara AX Framework and Niagara 4 Framework | Critical9.8 |
| CVE-2017-16744 | A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems…ICS-CERT · Niagara AX Framework and Niagara 4 Framework | High7.2 |
| CVE-2018-10636 | CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to…ICS-CERT · CNCSoft with ScreenEditor | High8.8 |
| CVE-2018-10598 | CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking…ICS-CERT · CNCSoft with ScreenEditor | High8.1 |
| CVE-2018-14785 | NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the device is listed openly without…ICS-CERT · NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. | High7.5 |