Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,082All CVEsplus 19,119 rejected
- 502Last 24 hours2,858 in the last 7 days
- 16,885Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 36 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 36 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 36 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 36 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 36 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 36 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 36 |
| 2019 | 0 | 1 | 0 | 0 | 0 | 1 | 36 |
| 2018 | 6 | 9 | 9 | 0 | 0 | 24 | 35 |
| 2017 | 9 | 2 | 0 | 0 | 0 | 11 | 11 |
| Title | ||
|---|---|---|
| CVE-2018-0722 | Path Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could…QNAP · Photo Station | High7.5 |
| CVE-2018-0724 | Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in…QNAP · Q'center Virtual Appliance | Medium6.1 |
| CVE-2018-0723 | Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in…QNAP · Q'center Virtual Appliance | Medium6.1 |
| CVE-2018-0716 | Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4…QNAP · Qsync Central | Medium6.1 |
| CVE-2018-14749 | Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions…QNAP · QNAP QTS | Critical9.8 |
| CVE-2018-14748 | Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier…QNAP · QNAP QTS | High7.5 |
| CVE-2018-14747 | NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier…QNAP · QNAP QTS | High7.5 |
| CVE-2018-14746 | Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions…QNAP · QNAP QTS | Critical9.8 |
| CVE-2018-0718 | Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands…QNAP · Music Station | Critical9.8 |
| CVE-2018-0715 | Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inject Javascript code in the compromised…QNAP · Photo Station | Medium6.1 |
| CVE-2018-0714 | Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528…QNAP · Helpdesk in QTS | Critical9.8 |
| CVE-2018-0710 | Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary…QNAP · Q'center Virtual Appliance | High8.8 |
| CVE-2018-0709 | Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary…QNAP · Q'center Virtual Appliance | High8.8 |
| CVE-2018-0708 | Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary…QNAP · Q'center Virtual Appliance | High8.8 |
| CVE-2018-0707 | Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run…QNAP · Q'center Virtual Appliance | High7.2 |
| CVE-2018-0706 | Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information.QNAP · Q'center Virtual Appliance | High8.8 |
| CVE-2018-0712 | Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions…QNAP · LDAP Server in QTS | Critical9.8 |
| CVE-2017-13072 | Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier…QNAP · App Center in QTS | Medium6.1 |
| CVE-2018-0711 | Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote attackers to…QNAP · QTS | Medium6.1 |
| CVE-2017-13073 | Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers…QNAP · Photo Station | Medium6.1 |
| CVE-2017-7641 | QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.QNAP · QNAP Media Streaming Add-On | High8.8 |
| CVE-2017-7640 | QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system…QNAP · QNAP Media Streaming Add-On | Critical9.8 |
| CVE-2017-7638 | QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could…QNAP · QNAP Media Streaming Add-On | Medium6.5 |
| CVE-2017-7634 | Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to…QNAP · QNAP Media Streaming Add-On | Medium6.1 |
| CVE-2017-7633 | QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise…QNAP · Qfinder Pro | High7.5 |
| CVE-2017-17033 | A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116…QNAP · QTS Notification function | Critical9.8 |
| CVE-2017-17032 | A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116…QNAP · QTS Password function | Critical9.8 |
| CVE-2017-17031 | A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116…QNAP · QTS Password function | Critical9.8 |
| CVE-2017-17030 | A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and…QNAP · QTS Login function | Critical9.8 |
| CVE-2017-17029 | A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and…QNAP · QTS Login function | Critical9.8 |
| CVE-2017-17028 | A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build…QNAP · QTS External Device function | Critical9.8 |
| CVE-2017-17027 | A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and…QNAP · QTS FTP service | Critical9.8 |
| CVE-2017-13070 | A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows…QNAP · Qsync for Windows (exe) | High7.8 |
| CVE-2017-13071 | QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS…QNAP · Video Station | Critical9.8 |
| CVE-2017-13068 | QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk…QNAP · QNAP Helpdesk APP | High7.5 |
| CVE-2017-13067 | QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299…QNAP · QTS Media Libary PRODUCT | Critical9.8 |