Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,673All CVEsplus 19,114 rejected
  • 397Last 24 hours2,821 in the last 7 days
  • 17,129Last 30 days1,580 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202601200348
202500000045
202402110445
202300310441
20222214001837
2021256301619
20201200033

Latest CVEs

48 CVEs, newest first

CVEs, newest first
Title
CVE-2026-1759
Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager:…Secomea · GateManager
Medium6.5
CVE-2026-1758
Session FixationSecomea · GateManager
High8.3
CVE-2025-14716
Unauthorized access to informationSecomea · GateManager
Medium6.5
CVE-2021-32007
Missing security header: Referrer-Policy URLSecomea · GateManager
Low3.5
CVE-2024-1969
Heap buffer overflowSecomea · GateManager
High8.2
CVE-2024-1579
Insufficient seeding of random number generatorSecomea · GateManager
High8.1
CVE-2023-3675
Insufficient input validation when downloading certain file types.Secomea · GateManager
Medium6.5
CVE-2023-2912
SiteManager Embedded service disruptionSecomea · SiteManager Embedded
Medium5.9
CVE-2022-38125
FTP Agent forwards traffic on inactive ports to LinkManagerSecomea · SiteManager
Low2.9
CVE-2023-0317
GateManager debug interface is included in non-debug buildsSecomea · GateManager
Medium4.9
CVE-2022-4308
Clear-text passwords in configuration filesSecomea · GateManager
Medium6.1
CVE-2022-38124
Unwanted debug toolSecomea · SiteManager
Medium5.7
CVE-2022-2752
Potential vulnerabilities in GM login processSecomea · GateManager
Medium5.5
CVE-2022-38123
Insufficient validation of plugin filesSecomea · GateManager
High8.7
CVE-2022-25786
GateManager debug interface is included in production buildsSecomea · GateManager
Medium4.9
CVE-2022-25787
GTA URLs issued by LMM WEB API may leak informationSecomea · GateManager
High7.5
CVE-2022-25785
Buffer overrunSecomea · SiteManager
Medium6.6
CVE-2022-25784
User controllable HTML element attribute (potential XSS)Secomea · SiteManager
Critical9.1
CVE-2022-25783
Hacking attempts from logged-in users are not properly logged by GMSecomea · GateManager
Medium4.3
CVE-2022-25782
Insufficient privilege checks on object access and updates.Secomea · GateManager
Medium5.4
CVE-2022-25781
Reflected XSS issues in GateManagerSecomea · GateManager
Medium4.2
CVE-2022-25780
Information leak via device availability query functionSecomea · GateManager
Medium4.3
CVE-2022-25779
Insufficient scope checks allows adding unrelated audit log entriesSecomea · GateManager
Medium4.3
CVE-2022-25778
Unload handlers may unintentionally defeat CSRF guardsSecomea · GateManager
Medium4.2
CVE-2021-32010
Clients may connect to a GateManager with TLS 1.0Secomea · SiteManager
Medium5.6
CVE-2021-32009
Missing XSS guards on firmware pageSecomea · GateManager
Medium5.0
CVE-2021-32005
SiteManager Log View XSS IssueSecomea · SiteManager
Medium6.5
CVE-2021-32006
GateManager information leak for LinkManager UsersSecomea · GateManager
Medium5.0
CVE-2021-32008
Logged-in Administrator may get unrestricted file system accessSecomea · GateManager
Critical9.9
CVE-2021-32004
GateManager does not enforce strict hostname matching for WEB serverSecomea · GateManager
Low3.7
CVE-2021-32003
Configuration service port remains open 10 minutes after reboot even when already provisionedSecomea · SiteManager
High8.0
CVE-2021-32002
SiteManager troubleshooter allows access without authentication from local networkSecomea · SiteManager
Medium4.3
CVE-2020-29030
Insufficient CSRF guardsSecomea · GateManager
High8.1
CVE-2020-29020
Reject Remote Management via Cellular UPLINK2Secomea · SiteManager
Critical9.1
CVE-2020-29028
Reflected XSS issuesSecomea · GateManager
Medium6.3
CVE-2020-29029
XSS issue due to insufficient sanitization of input fieldSecomea · GateManager
High7.3
CVE-2020-29032
Add integrity check of GateManager firmwareSecomea · GateManager
High8.4
CVE-2020-29027
Reflected Cross Site ScriptingSecomea · SiteManager
Medium5.4
CVE-2020-29025
DOM-based Javascript injectionSecomea · SiteManager Embedded (SM-E)
Medium5.4
CVE-2020-29023
CSV Formula Injection possible due to improper fields escaping in GateManagerSecomea · GateManager
Low3.5
CVE-2020-29022
Host Header Injection allowing web cache poisoning attacksSecomea · GateManager
Medium5.3
CVE-2020-29024
Missing HtppOnly and Secure flagsSecomea · GateManager
Medium5.3
CVE-2020-29031
Insecure Direct Object Reference in GateManager WebUI can cause privilege escalationSecomea · GateManager
High7.1
CVE-2020-29026
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions…Secomea · GateManager
Critical9.0
CVE-2020-29021
Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)Secomea · GateManager
Low3.5
CVE-2020-14512
USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916Secomea · GateManager
High8.1
CVE-2020-14510
OFF-BY-ONE ERROR CWE-193Secomea · GateManager
Critical9.8
CVE-2020-14508
OFF-BY-ONE ERROR CWE-193Secomea · GateManager
High8.1