Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,903All CVEsplus 19,118 rejected
  • 375Last 24 hours2,802 in the last 7 days
  • 16,790Last 30 days1,548 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000015
2025444001215
20241020033

Latest CVEs

15 CVEs, newest first

CVEs, newest first
Title
CVE-2025-24288
The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multiple accounts (most…Versa · Director
Critical9.8
CVE-2025-24291
The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files. However, the Java code handling file uploads contains…Versa · Director
Medium6.1
CVE-2024-45208
The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service. Active and Standby Directors communicate over TCP ports 4566…Versa · Director
Critical9.8
CVE-2025-23171
The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Director does not correctly limit file upload…Versa · Director
High7.2
CVE-2025-23168
The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS. Versa…Versa · Director
Medium6.3
CVE-2025-23172
The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints. However, the "Add Webhook"…Versa · Director
High7.2
CVE-2025-23173
The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify…Versa · Director
High7.5
CVE-2025-23169
The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo. However, the input…Versa · Director
Medium6.1
CVE-2025-23170
The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box. The…Versa · Director
Medium6.7
CVE-2025-34025
Versa Concerto Insecure Docker Mount Container EscapeVersa · Concerto
High8.6
CVE-2025-34026
Versa Concerto Actuator Authentication Bypass Information LeakExploitedVersa · Concerto
Critical9.2
CVE-2025-34027
Versa Concerto Authentication Bypass File Write Remote Code ExecutionVersa · Concerto
Critical10.0
CVE-2024-42450
The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High Availability function of the Versa…Versa · Director
Critical10.0
CVE-2024-45229
The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device…Versa · Director
Medium6.6
CVE-2024-39717
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with…ExploitedVersa · Director
Medium6.6