Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,063All CVEsplus 19,157 rejected
- 1,920Last 24 hours4,784 in the last 7 days
- 18,797Last 30 days1,611 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 33 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 33 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 33 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 32 |
| 2022 | 3 | 8 | 6 | 0 | 0 | 17 | 32 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 15 |
| 2020 | 0 | 0 | 1 | 0 | 0 | 1 | 14 |
| 2019 | 0 | 0 | 1 | 0 | 0 | 1 | 13 |
| 2018 | 1 | 3 | 1 | 0 | 0 | 5 | 12 |
| 2017 | 0 | 0 | 1 | 0 | 0 | 1 | 7 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2015 | 1 | 0 | 3 | 0 | 0 | 4 | 6 |
| 2014 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2024-6098 | PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or ThrottlingPTC · Kepware ThingWorx Kepware Server | Medium5.9 |
| CVE-2022-3092 | GE CIMPLICITY Out-of-bounds WriteGE · CIMPLICITY | High7.8 |
| CVE-2022-3084 | GE CIMPLICITY Access of Uninitialized PointerGE · CIMPLICITY | High7.8 |
| CVE-2022-2952 | GE CIMPLICITY Access of Uninitialized PointerGE · CIMPLICITY | High7.8 |
| CVE-2022-2948 | GE CIMPLICITY Heap-based Buffer OverflowGE · CIMPLICITY | High7.8 |
| CVE-2022-2002 | GE CIMPLICITY Untrusted Pointer DereferenceGE · CIMPLICITY | High7.8 |
| CVE-2020-36549 | GE Voluson S8 Windows Operating System Patches privileges managementGE · Voluson S8 | High8.8 |
| CVE-2020-36548 | GE Voluson S8 Service Browser users.cgi improper authenticationGE · Voluson S8 | Medium5.9 |
| CVE-2020-36547 | GE Voluson S8 Service Browser hard-coded credentialsGE · Voluson S8 | Medium5.9 |
| CVE-2021-27422 | GE UR family exposure of sensitive information to an unauthorized actorGE · UR family | High7.5 |
| CVE-2021-27426 | GE UR family insecure default variable initializationGE · UR family | Critical9.8 |
| CVE-2021-27430 | GE UR family hardcoded credentialsGE · UR bootloader binary | High8.4 |
| CVE-2021-27428 | GE UR family Unrestricted Upload of File with Dangerous TypeGE · UR family | Critical9.8 |
| CVE-2021-27424 | GE UR family exposure of sensitive information to an unauthorized actorGE · UR family | Medium5.3 |
| CVE-2021-27420 | GE UR family input validationGE · UR family | Medium5.3 |
| CVE-2021-27418 | GE UR family input validationGE · UR family | Medium5.3 |
| CVE-2020-25193 | GE Reason RT43X Clocks Use of Hard-coded Cryptographic KeyGE · Reason RT43X Clocks | Medium5.3 |
| CVE-2020-25197 | GE Reason RT43X Clocks Code InjectionGE · Reason RT43X Clocks | Critical9.8 |
| CVE-2021-31477 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. Authentication is not required to…GE · Reason RPV311 | Medium6.3 |
| CVE-2020-6977 | A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user…GE · GE Ultrasound Products | Medium6.8 |
| CVE-2019-10966 | In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP…GE · Aestiva and Aespire | Medium5.3 |
| CVE-2018-17925 | Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identified in the third-party ActiveX object provided to…GE · iFix | Medium4.8 |
| CVE-2017-7908 | A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that…GE · GE Communicator | High7.6 |
| CVE-2018-10615 | Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform.GE · MDS PulseNET and MDS PulseNET Enterprise | High8.1 |
| CVE-2018-10613 | Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET…GE · MDS PulseNET and MDS PulseNET Enterprise | High7.5 |
| CVE-2018-10611 | Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated…GE · MDS PulseNET and MDS PulseNET Enterprise | Critical9.8 |
| CVE-2015-3976 | GE Multilink Cross-site ScriptingGE · Multilink ML800/1200/1600/2400 | Medium6.8 |
| CVE-2014-5409 | GE Hydran M2 Predictable Value Range from Previous ValuesGE · Hydran M2, containing the 17046 Ethernet option | Medium6.4 |
| CVE-2014-5419 | GE Multilink Use of Hard-coded Cryptographic KeyGE · Multilink ML800/1200/1600/2400 | Critical10.0 |
| CVE-2014-5418 | GE Multilink Uncontrolled Resource ConsumptionGE · Multilink ML800/1200/1600/2400 | Medium5.0 |
| CVE-2014-2355 | GE Proficy HMI/SCADA CIMPLICITY CimViewGE · Proficy HMI/SCADA–CIMPLICITY | Medium6.6 |
| CVE-2014-0751 | GE Proficy HMI/SCADA Path TraversalGE · Proficy HMI/SCADA - CIMPLICITY | Medium6.8 |
| CVE-2014-0750 | GE Proficy HMI/SCADA Path TraversalPublic exploitGE · Proficy HMI/SCADA - CIMPLICITY | High7.5 |