Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,903All CVEsplus 19,118 rejected
  • 374Last 24 hours2,802 in the last 7 days
  • 16,790Last 30 days1,548 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000020
202523310920
2024531101011
20230100011

Latest CVEs

20 CVEs, newest first

CVEs, newest first
Title
CVE-2025-14817
Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADBTECNO · Tecno Pova6 Pro 5G
Medium6.5
CVE-2025-9056
Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.TECNO · com.transsion.audiosmartconnect
Medium5.3
CVE-2025-7703
Authentication vulnerability in the mobile application(tech.palm.id)may lead to the risk of information leakage.TECNO · tech.palm.id
Low3.1
CVE-2025-6172
Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation.TECNO · com.afmobi.boomplayer
Critical9.8
CVE-2025-4737
Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.TECNO · com.transsion.aivoiceassistant
Medium6.2
CVE-2025-3698
Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk.TECNO · com.transsion.carlcare
High7.5
CVE-2025-2190
The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.TECNO · com.transsnet.store
High8.1
CVE-2025-1298
Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.TECNO · com.transsion.carlcare
Critical9.8
CVE-2025-0590
Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.TECNO · com.transsion.carlcare
High7.5
CVE-2024-12603
A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.TECNO · com.transsion.applock
Critical9.8
CVE-2024-11206
Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information.TECNO · com.transsion.phoenix
High7.5
CVE-2024-10195
Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injectionTecno · 4G Portable WiFi TR118
Medium5.1
CVE-2024-10018
Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.TECNO · com.transsion.aivoiceassistant
Critical9.8
CVE-2024-8039
Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.TECNO · com.afmobi.boomplayer
Critical9.8
CVE-2024-7697
Logical vulnerability in com.transsion.carlcareTECNO · com.transsion.carlcare
High7.5
CVE-2024-6780
Improper permission control in com.android.server.telecomTECNO · com.android.server.telecom
Low3.3
CVE-2024-5163
Improper permission settings in com.transsion.carlcareTECNO · com.transsion.carlcare
Critical9.8
CVE-2024-4988
Improper permission control in com.transsion.videocallenhancerTECNO · com.transsion.videocallenhancer
High7.5
CVE-2024-3701
Improper Authentication in com.transsion.kolun.aiserviceTECNO · com.transsion.kolun.aiservice
Critical9.8
CVE-2023-6304
Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injectionTecno · 4G Portable WiFi TR118
High7.2