Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,620All CVEsplus 19,169 rejected
  • 564Last 24 hours4,903 in the last 7 days
  • 18,568Last 30 days1,586 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026347001428
202503000314
2024164001111

Latest CVEs

28 CVEs, newest first

CVEs, newest first
Title
CVE-2026-8331
TimePictra ermote code execution via file uploadMicrochip · TimePictra
High8.8
CVE-2026-8332
TimePictra root password hardcoded in installation filesMicrochip · TimePictra
High8.8
CVE-2026-8333
TimePictra Stored Cross-site ScriptingMicrochip · TimePictra
Critical9.4
CVE-2026-89172
Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithmsMicrochip · AN1044
Medium5.6
CVE-2026-18349
SAMA5D44 Fault Injection VulnerabilityMicrochip · SAMA5D4
High7.3
CVE-2026-12620
Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time ServerMicrochip · GridTime 3000
Medium4.6
CVE-2026-12621
Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time ServerMicrochip · GridTime 3000
Medium5.3
CVE-2026-12622
Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time ServerMicrochip · GridTime 3000
Medium5.3
CVE-2026-12619
GridTime™ 3000 GNSS Time Server CSRF to XSSMicrochip · GridTime 3000
Medium5.1
CVE-2026-2336
Weak webstax_auth Cookie Authentication Allows Privilege EscalationMicrochip · IStaX
High8.7
CVE-2025-9497
Hardcoded Upgrade Decryption PasswordsMicrochip · Time Provider 4100
Medium5.5
CVE-2026-3010
TimePictra Stored Cross-Site ScriptingMicrochip · TimePictra
Critical9.3
CVE-2026-2844
TimePictra Authentication Bypass VulnerabilityMicrochip · TimePictra
Critical9.3
CVE-2025-47904
Unsigned upgrade packageMicrochip · Time Provider 4100
Medium5.7
CVE-2025-47902
SQL Injection in web resourceMicrochip · Time Provider 4100
High7.1
CVE-2025-47901
RCE on restore configuration passwordMicrochip · Time Provider 4100
High8.9
CVE-2025-47900
RCE on backup configuration passwordMicrochip · Time Provider 4100
High8.9
CVE-2024-29155
Denial of service on Microchip RN4870 devicesMicrochip · RN4870
Medium4.3
CVE-2024-43683
Improper verification of the Host header in TimeProvider 4100Microchip · TimeProvider 4100
High8.7
CVE-2024-43684
Cross-Site Request Forgery vulnerability in TimeProvider 4100Microchip · TimeProvider 4100
High8.7
CVE-2024-43685
Session token fixation in TimeProvider 4100Microchip · TimeProvider 4100
High8.7
CVE-2024-43686
Reflected XSS in TimeProvider 4100 chart componentMicrochip · TimeProvider 4100
Medium5.4
CVE-2024-9054
Remote code Execution inTimeProvider® 4100Public exploitMicrochip · TimeProvider 4100
High8.5
CVE-2024-43687
XSS vulnerability in bannerconfig endpoint in TimeProvider 4100Public exploitMicrochip · TimeProvider 4100
High7.7
CVE-2024-7801
SQL injection in get_chart_data in TimeProvider 4100Public exploitMicrochip · TimeProvider 4100
Medium6.3
CVE-2024-7490
Remote Code Execution in Advanced Software Framework DHCP serverMicrochip Techology · Advanced Software Framework
Critical9.5
CVE-2024-30212
Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE commandPublic exploitMicrochip · MPLAB® Harmony 3 Core Module
High7.0
CVE-2024-4760
Voltage glitch during startup of the EEFC NVM controller can bypass the security bitPublic exploitMicrochip · SAME70
Medium6.3