Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,058All CVEsplus 19,119 rejected
- 491Last 24 hours2,911 in the last 7 days
- 16,876Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 14 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 14 |
| 2024 | 0 | 2 | 0 | 0 | 0 | 2 | 14 |
| 2023 | 0 | 8 | 4 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2024-50381 | Missing Authentication for Critical Function in Snap One OVRC cloudSnap One · OVRC cloud | High8.8 |
| CVE-2024-50380 | Authentication Bypass by Spoofing in Snap One OVRC cloudSnap One · OVRC cloud | High8.7 |
| CVE-2023-25183 | In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary…Snap One · OvrC Cloud | High8.3 |
| CVE-2023-31240 | Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a…Snap One · OvrC Cloud | High8.3 |
| CVE-2023-31245 | Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a…Snap One · OvrC Cloud | High7.1 |
| CVE-2023-28386 | Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does…Snap One · OvrC Cloud | High8.6 |
| CVE-2023-31193 | Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pro devices are…Snap One · OvrC Cloud | High7.5 |
| CVE-2023-31241 | Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.Snap One · OvrC Cloud | High8.6 |
| CVE-2023-28412 | When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enumerated in…Snap One · OvrC Cloud | Medium5.3 |
| CVE-2023-28649 | The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an…Snap One · OvrC Cloud | High8.6 |
| CVE-2023-23582 | Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary…Snap One · Wattbox WB-300-IP-3 | Medium5.3 |
| CVE-2023-22389 | Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via…Snap One · Wattbox WB-300-IP-3 | Medium5.7 |
| CVE-2023-22315 | Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An…Snap One · Wattbox WB-300-IP-3 | Medium6.7 |
| CVE-2023-24020 | Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login.Snap One · Wattbox WB-300-IP-3 | High7.5 |