Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,974All CVEsplus 19,118 rejected
- 407Last 24 hours2,833 in the last 7 days
- 16,806Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 1 | 0 | 0 | 0 | 5 | 31 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 26 |
| 2024 | 1 | 2 | 4 | 0 | 0 | 7 | 26 |
| 2023 | 3 | 4 | 3 | 2 | 0 | 12 | 19 |
| 2022 | 3 | 3 | 1 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-77646 | Server Side Request Forgery (SSRF) vulnerability reported in WindchillPTC · Windchill PDMLink | High7.7 |
| CVE-2026-77645 | Critical Remote Code Execution (RCE) vulnerability reported in WindchillPTC · Windchill PDMLink | Critical9.2 |
| CVE-2026-77644 | Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise EditionPTC · Windchill Risk and Reliability Enterprise Edition (Formerly Relex) | Critical9.3 |
| CVE-2026-12569 | Remote Code Execution (RCE) vulnerability in Windchill PDMlinkExploitedPTC · Windchill PDMLink | Critical9.3 |
| CVE-2026-4681 | Critical Remote Code Execution vulnerability reported in WindchillPTC · Windchill PDMLink | Critical9.3 |
| CVE-2024-6098 | PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or ThrottlingPTC · Kepware ThingWorx Kepware Server | Medium5.9 |
| CVE-2024-6071 | PTC Creo Elements/Direct License Server Missing AuthorizationPTC · Creo Elements/Direct License | Critical10.0 |
| CVE-2024-3951 | Cross-site Scripting in PTC CodebeamerPTC · Codebeamer | High7.1 |
| CVE-2023-29447 | Insufficiently Protected Credentials in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX | Medium5.7 |
| CVE-2023-29446 | Improper Input Validation in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX | Medium4.7 |
| CVE-2023-29445 | Uncontrolled Search Path Element in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX | High7.8 |
| CVE-2023-29444 | Uncontrolled Search Path Element in PTC's Kepware KEPServerEXPTC · Kepware KEPServerEX | Medium6.3 |
| CVE-2023-5909 | Improper Validation of Certificate with Host Mismatch in PTC KEPServerExPTC · KEPServerEX | High7.5 |
| CVE-2023-5908 | Heap Based Buffer Overflow in PTC KEPServerExPTC · KEPServerEX | Critical9.1 |
| CVE-2023-4296 | PTC Codebeamer Cross site scriptingPTC · Codebeamer | High8.8 |
| CVE-2023-3825 | PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled resource consumption.…PTC · KEPServerEX | High7.5 |
| CVE-2023-31200 | PTC Vuforia Studio Cross-Site Request ForgeryPTC · Vuforia Studio | Medium5.7 |
| CVE-2023-29502 | PTC Vuforia Studio Path TraversalPTC · Vuforia Studio | Medium6.2 |
| CVE-2023-27881 | PTC Vuforia Studio Unrestricted Upload of File with Dangerous TypePTC · Vuforia Studio | High8.0 |
| CVE-2023-29152 | PTC Vuforia Studio Improper AuthorizationPTC · Vuforia Studio | Medium6.2 |
| CVE-2023-24476 | PTC Vuforia Studio Improper AuthorizationPTC · Vuforia Studio | Low1.8 |
| CVE-2023-29168 | PTC Vuforia Studio Insufficiently Protected CredentialsPTC · Vuforia Studio | Low3.7 |
| CVE-2023-0754 | The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary…PTC · ThingWorx Edge C-SDK | Critical9.8 |
| CVE-2023-0755 | The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary…PTC · ThingWorx Edge C-SDK | Critical9.8 |
| CVE-2022-25251 | PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionPTC · Axeda agent | Critical9.8 |
| CVE-2022-25252 | PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional ConditionsPTC · Axeda agent | High7.5 |
| CVE-2022-25250 | PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionPTC · Axeda agent | High7.5 |
| CVE-2022-25249 | PTC Axeda agent and Axeda Desktop Server Path TraversalPTC · Axeda agent | High7.5 |
| CVE-2022-25248 | PTC Axeda agent and Axeda Desktop Server Information ExposurePTC · Axeda agent | Medium5.3 |
| CVE-2022-25246 | PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded CredentialsPTC · Axeda agent | Critical9.8 |
| CVE-2022-25247 | PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical FunctionPTC · Axeda agent | Critical9.8 |