Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,310All CVEsplus 19,140 rejected
- 461Last 24 hours2,730 in the last 7 days
- 16,919Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 35 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 35 |
| 2024 | 0 | 11 | 14 | 0 | 0 | 25 | 35 |
| 2023 | 0 | 6 | 0 | 0 | 0 | 6 | 10 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2021 | 2 | 2 | 0 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2023-48266 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48265 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48264 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48263 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48262 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48261 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48260 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48259 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48258 | The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.5 |
| CVE-2023-48257 | The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High7.8 |
| CVE-2023-48256 | The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48255 | The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium6.3 |
| CVE-2023-48254 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48253 | The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.8 |
| CVE-2023-48252 | The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.8 |
| CVE-2023-48251 | The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48250 | The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48249 | The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium6.5 |
| CVE-2023-48248 | The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.5 |
| CVE-2023-48247 | The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48246 | The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium6.5 |
| CVE-2023-48245 | The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium6.5 |
| CVE-2023-48244 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request.Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium5.3 |
| CVE-2023-48243 | The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | High8.1 |
| CVE-2023-48242 | The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user…Rexroth · Nexo cordless nutrunner NXA015S-36V (0608842001) | Medium6.5 |
| CVE-2023-45220 | The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve…Rexroth · ctrlX HMI Web Panel - WR21 (WR2107) | High8.8 |
| CVE-2023-41372 | The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application,…Rexroth · ctrlX HMI Web Panel - WR21 (WR2107) | High7.8 |
| CVE-2023-41960 | The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent…Rexroth · ctrlX HMI Web Panel - WR21 (WR2107) | High7.1 |
| CVE-2023-41255 | The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of…Rexroth · ctrlX HMI Web Panel - WR21 (WR2107) | High8.8 |
| CVE-2023-43488 | The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB…Rexroth · ctrlX HMI Web Panel - WR21 (WR2107) | High7.9 |
| CVE-2023-45844 | The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and…Rexroth · ctrlX HMI Web Panel - WR21 (WR2107) | High7.3 |
| CVE-2021-23857 | Login with hashRexroth · IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLC | Critical10.0 |
| CVE-2021-23855 | Information disclosureRexroth · IndraMotion MLC IndraMotion XLC | High8.6 |
| CVE-2021-23858 | Information disclosureRexroth · IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraControl XLC | High8.6 |
| CVE-2021-23856 | Reflected Cross-Site-ScriptingRexroth · IndraMotion MLC L20, L40 | Critical10.0 |