Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,033All CVEsplus 19,141 rejected
- 241Last 24 hours3,247 in the last 7 days
- 16,890Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 2 | 4 | 0 | 0 | 8 | 63 |
| 2025 | 3 | 7 | 9 | 0 | 0 | 19 | 55 |
| 2024 | 1 | 11 | 6 | 1 | 0 | 19 | 36 |
| 2023 | 6 | 6 | 5 | 0 | 0 | 17 | 17 |
| Title | ||
|---|---|---|
| CVE-2026-13248 | Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command InterfaceHoneywell · PD45 Industrial Printer | High8.8 |
| CVE-2026-13249 | Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040Honeywell · PD45 Industrial Printer | Critical9.8 |
| CVE-2026-17612 | Audit Log Exposure through Unauthorized AccessHoneywell · S35 Series 3M/5M/8M/PinHole Cameras | Medium6.9 |
| CVE-2026-11804 | Program Module VulnerabilityTridium · Niagara Framework | Medium5.2 |
| CVE-2026-13742 | Lack of signature verification before execution of downloaded contentHoneywell Technologies · IQ MultiAccess | Medium5.9 |
| CVE-2026-5434 | Improper storage of sensitive informationHoneywell International Inc. · Control Network Module (CNM) | Medium5.9 |
| CVE-2026-5433 | Improper sanitizationHoneywell International Inc. · Control Network Module (CNM) | Critical9.1 |
| CVE-2026-4272 | CVE-2026-4272 - Bluetooth Remote Execution of System Commands VulnerabilityHoneywell · Barcode Scanners | High8.1 |
| CVE-2025-12351 | Inadequate access control measure allows unauthorized users to access restricted administrative functionsHoneywell · S35 3M/5M/8M/Pinhole/Kit Camera | Medium6.8 |
| CVE-2025-3947 | Integer underflow during processing of short network packets in CDA FTEB responderHoneywell · C300 PCNT02 | High8.2 |
| CVE-2025-3946 | Incorrect response generation during FTEB protocol processingHoneywell · C300 PCNT02 | High8.2 |
| CVE-2025-2523 | Lack of buffer clearing before reuse may result in incorrect system behavior.Honeywell · C300 PCNT02 | Critical9.4 |
| CVE-2025-2522 | Lack of buffer clearing before reuse may result in incorrect system behavior.Honeywell · C300 PCNT02 | Medium6.5 |
| CVE-2025-2521 | Lack of indexes’ validation against buffer borders leads to remote code execution.Honeywell · C300 PCNT02 | High8.6 |
| CVE-2025-2520 | Dereferencing of an uninitialized pointer leads to denial of service.Honeywell · C300 PCNT02 | High7.5 |
| CVE-2025-3945 | Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)Tridium · Niagara Framework | High7.2 |
| CVE-2025-3944 | Incorrect Permission Assignment for Critical ResourceTridium · Niagara Framework | High7.2 |
| CVE-2025-3943 | Use of GET Request Method With sensitive Query StringsTridium · Niagara Framework | Medium4.1 |
| CVE-2025-3942 | Improper Output Neutralization for LogsTridium · Niagara Framework | Medium4.3 |
| CVE-2025-3941 | Improper Handling of Windows: DATA Alternate Data StreamTridium · Niagara Framework | Medium5.4 |
| CVE-2025-3940 | Improper Use of Validation FrameworkTridium · Niagara Framework | Medium5.3 |
| CVE-2025-3939 | Observable Response DiscrepancyTridium · Niagara Framework | Medium5.3 |
| CVE-2025-3938 | Missing Cryptographic StepTridium · Niagara Framework | Medium6.8 |
| CVE-2025-3937 | Use of Password Hash with Insufficient Computational EffortTridium · Niagara Framework | High7.7 |
| CVE-2025-3936 | Incorrect Permission Assignment for Critical ResourceTridium · Niagara Framework | Medium6.5 |
| CVE-2025-2605 | Authenticated command injectionHoneywell · MB-Secure | Critical9.9 |
| CVE-2023-5878 | OneWireless command injection possible when updating firmwareHoneywell · OneWireless Network Wireless Device Manager | Critical9.4 |
| CVE-2024-6620 | Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially…Honeywell · PC42t, PC42tp, and PC42d (Common Firmware) | Low3.5 |
| CVE-2023-5407 | Controller denial of service due to improper handling of a specially crafted message received by the controller. See Honeywell Security Notification for…Honeywell · C300 | Medium5.9 |
| CVE-2023-5406 | Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See Honeywell Security…Honeywell · Experion Server | Medium5.9 |
| CVE-2023-5405 | Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. See Honeywell…Honeywell · Experion Server | Medium5.9 |
| CVE-2023-5404 | Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution or failure. See Honeywell Security…Honeywell · Experion Server | High8.1 |
| CVE-2023-5403 | Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution or causing a failure. See Honeywell…Honeywell · Experion Server | High8.1 |
| CVE-2023-5401 | Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker…Honeywell · Experion Server | High8.1 |
| CVE-2023-5400 | Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to an attacker…Honeywell · Experion Server | High8.1 |
| CVE-2023-5398 | Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell Security Notification for…Honeywell · Experion Server | Medium5.9 |
| CVE-2023-5397 | Server receiving a malformed message to create a new connection could lead to an attacker performing remote code execution or causing a failure. See Honeywell…Honeywell · Experion Server | High8.1 |
| CVE-2023-5396 | Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in possible remote code execution. See…Honeywell · Experion Server | High7.4 |
| CVE-2023-5395 | Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in possible remote code execution. See…Honeywell · Experion Server | High8.1 |
| CVE-2023-5394 | Server receiving a malformed message that where the GCL message hostname may be too large which may cause a stack overflow; resulting in possible remote code…Honeywell · Experion Server | High7.4 |
| CVE-2023-5393 | Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell…Honeywell · Experion Server | High7.4 |
| CVE-2023-5392 | C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends…Honeywell · C300 | High7.5 |
| CVE-2023-1841 | Honeywell MPA2 Web Application XSS vulnerabilityHoneywell · MPA2 Access Panel | High8.1 |
| CVE-2024-1309 | Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5Honeywell · Niagara Framework | Medium6.5 |
| CVE-2023-5390 | An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC.…Honeywell · ControlEdge UOC | Medium5.3 |
| CVE-2023-5389 | An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualUOC and ControlEdge…Honeywell · ControlEdge UOC | Critical9.1 |
| CVE-2023-6179 | Incorrect Permission assignment to program executable foldersHoneywell · ProWatch | High7.8 |
| CVE-2023-3712 | Potential user privilege escalationHoneywell · PM23/43 | Medium6.6 |
| CVE-2023-3711 | Potential Predictable Session IDHoneywell · PM23/43 | Medium6.4 |
| CVE-2023-3710 | Printer web page invalid command executionHoneywell · PM23/43 | Critical9.9 |