Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 402,749All CVEsplus 19,156 rejected
  • 569Last 24 hours3,416 in the last 7 days
  • 17,045Last 30 days1,516 of them critical
  • 1,772Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000029
202500000029
202400000029
202300000029
202200000029
202100000029
202014114002929

Latest CVEs

29 CVEs, newest first

CVEs, newest first
Title
CVE-2020-10291
RVD#3336: System information disclosure without authentication on KUKA simulatorsKUKA Roboter GmbH · Visual Components Network License Server 2.0.8
High7.5
CVE-2020-10292
Service DoS through arbitrary pointer dereferencing on KUKA simulatorKUKA Roboter GmbH · Visual Components Network License Server 2.0.8
High8.2
CVE-2020-10290
RVD#1495: Universal Robots URCaps execute with unbounded privilegesUniversal Robots · URx
Medium6.8
CVE-2020-10283
RVD#3317: MAVLink version handshaking allows for an attacker to bypass authenticationPX4 · MAVLink
High8.1
CVE-2020-10289
RVD#2401: Use of unsafe yaml load, ./src/actionlib/tools/library.py:132Open Robotics · ros
High8.0
CVE-2020-10287
RVD#3326: Hardcoded default credentials on IRC 5 OPC ServerABB · IRB140
Critical9.1
CVE-2020-10288
RVD#3327: No authentication required for accesing ABB IRC5 FTP serverABB · IRB140
Critical9.8
CVE-2020-10286
RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoSuFactory · xArm 5 Lite, xArm 6 and xArm 7
Critical9.4
CVE-2020-10285
RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networksuFactory · xArm5 Lite, xArm 6 and xArm 7
Critical9.4
CVE-2020-10284
RVD#3321: No Authentication required to exert manual control of the robotuFactory · xArm5 Lite, xArm 6 and xArm 7
Critical9.1
CVE-2020-10282
RVD#3316: No authentication in MAVLink protocolunspecified · MAVLink
Critical9.8
CVE-2020-10281
RVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.0unspecified · MAVLink
High7.5
CVE-2020-10279
RVD#2569: Insecure operating system defaults in MiR robotsMobile Industrial Robots A/S · MiR100
Critical10.0
CVE-2020-10280
RVD#2568: Apache server is vulnerable to a DoSMobile Industrial Robots A/S · MiR100
High8.2
CVE-2020-10269
RVD#2566: Hardcoded Credentials on MiRX00 wireless Access PointMobile Industrial Robots A/S · MiR100
Critical9.8
CVE-2020-10275
RVD#2565: Weak token generation for the REST API.Mobile Industrial Robots A/S · MiR100
Critical9.8
CVE-2020-10273
RVD#2560: Unprotected intellectual property in Mobile Industrial Robots (MiR) controllersMobile Industrial Robots A/S · MiR100
High7.5
CVE-2020-10278
RVD#2561: Unprotected BIOS allows user to boot from live OS image.Mobile Industrial Robots A/S · MiR100
Medium6.1
CVE-2020-10277
RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalationMobile Industrial Robots A/S · MiR100
Medium6.4
CVE-2020-10270
RVD#2557: Hardcoded Credentials on MiRX00 Control DashboardMobile Industrial Robots A/S · MiR100
Critical9.8
CVE-2020-10276
RVD#2558: Default credentials on SICK PLC allows disabling safety featuresMobile Industrial Robots A/S · MiR100
Critical9.8
CVE-2020-10271
RVD#2555: MiR ROS computational graph is exposed to all network interfaces, including poorly secured wireless networks and open wired onesMobile Industrial Robots A/S · MiR100
Critical10.0
CVE-2020-10274
RVD#2556: MiR REST API allows for data exfiltration by unauthorized attackers (e.g. indoor maps)Mobile Industrial Robots A/S · MiR100
High7.1
CVE-2020-10272
RVD#2554: MiR ROS computational graph presents no authentication mechanismsMobile Industrial Robots A/S · MiR100
Critical10.0
CVE-2020-10268
RVD#2550: Terminate Critical Services in KUKA controller KR C4KUKA Roboter GmbH · KR3R540, KRC4, KSS8.5.7HF1, Win7_Embedded
Medium6.1
CVE-2020-10267
RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versionsUniversal Robots · UR3, UR5 and UR10
High7.5
CVE-2020-10266
RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robotUniversal Robots · URx
High8.8
CVE-2020-10265
RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functionsUniversal Robots · Universal Robots Robot Controllers CB 2, CB3, e-series
Critical9.4
CVE-2020-10264
RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputsUniversal Robots A/S · Universal Robots Robot Controllers CB 3.1
High8.8