Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,644All CVEsplus 19,170 rejected
- 524Last 24 hours4,867 in the last 7 days
- 18,534Last 30 days1,580 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 0 | 0 | 0 | 6 | 94 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 88 |
| 2024 | 4 | 2 | 1 | 0 | 0 | 7 | 87 |
| 2023 | 2 | 67 | 5 | 0 | 0 | 74 | 80 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 6 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2019 | 5 | 0 | 0 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-29988 | A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions…Milesight · AM102/102L V2 | High8.3 |
| CVE-2026-20766 | Milesight Cameras Heap-based Buffer OverflowMilesight · MS-Cxx63-PD | High8.6 |
| CVE-2026-32649 | Milesight Cameras OS Command InjectionMilesight · MS-Cxx63-PD | High7.3 |
| CVE-2026-32644 | Milesight Cameras Use of Hard-coded Cryptographic KeyMilesight · MS-Cxx63-PD | Critical9.2 |
| CVE-2026-27785 | Milesight Cameras Use of Hard-coded CredentialsMilesight · MS-Cxx63-PD | High7.7 |
| CVE-2026-28747 | Milesight Cameras Authorization Bypass Through User-Controlled KeyMilesight · MS-Cxx63-PD | High7.3 |
| CVE-2025-4043 | Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot CodeMilesight · UG65-868M-EA | Medium6.1 |
| CVE-2024-36392 | MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')MileSight · DeviceHub | Medium6.1 |
| CVE-2024-36391 | MileSight DeviceHub - CWE-320: Key Management ErrorsMileSight · DeviceHub | Critical9.1 |
| CVE-2024-36390 | MileSight DeviceHub - CWE-20 Improper Input ValidationMileSight · DeviceHub | High7.5 |
| CVE-2024-36389 | MileSight DeviceHub - CWE-330 Use of Insufficiently Random ValuesMileSight · DeviceHub | Critical9.8 |
| CVE-2024-36388 | MileSight DeviceHub - CWE-305 Missing Authentication for Critical FunctionMileSight · DeviceHub | Critical10.0 |
| CVE-2024-27776 | MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')MileSight · DeviceHub | Critical9.8 |
| CVE-2023-47166 | A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted network request can lead…Milesight · UR32L | High8.8 |
| CVE-2023-23550 | An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-23547 | A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can…Milesight · UR32L | Medium6.5 |
| CVE-2023-23571 | An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of…Public exploitMilesight · UR32L | High7.5 |
| CVE-2023-23902 | A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to remote…Public exploitMilesight · UR32L | Critical9.8 |
| CVE-2023-22306 | An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-22659 | An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5. A specially-crafted network packets…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-22844 | An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request…Public exploitMilesight · MilesightVPN | High7.3 |
| CVE-2023-22319 | A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to…Public exploitMilesight · MilesightVPN | High7.3 |
| CVE-2023-23907 | A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to…Milesight · MilesightVPN | High7.5 |
| CVE-2023-22371 | An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request…Public exploitMilesight · MilesightVPN | High8.1 |
| CVE-2023-24497 | Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP…Milesight · MilesightVPN | Medium4.7 |
| CVE-2023-24496 | Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP…Milesight · MilesightVPN | Medium4.7 |
| CVE-2023-23546 | A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middle attack can lead…Milesight · UR32L | Medium4.2 |
| CVE-2023-24520 | Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted…Public exploitMilesight · UR32L | High8.8 |
| CVE-2023-24519 | Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted…Public exploitMilesight · UR32L | High8.8 |
| CVE-2023-24583 | Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network…Public exploitMilesight · UR32L | High8.8 |
| CVE-2023-24582 | Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5. A specially crafted network…Public exploitMilesight · UR32L | High8.8 |
| CVE-2023-22365 | An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially crafted set of…Milesight · UR32L | High7.2 |
| CVE-2023-22299 | An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can…Public exploitMilesight · UR32L | High8.8 |
| CVE-2023-24595 | An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5. A specially crafted series of…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-22653 | An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request…Milesight · UR32L | High8.8 |
| CVE-2023-24018 | A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3.0.5. A specially…Public exploitMilesight · UR32L | High8.8 |
| CVE-2023-25124 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25123 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25122 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25121 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25120 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25119 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25118 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25117 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25116 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25115 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25114 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25113 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25112 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |
| CVE-2023-25111 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially…Public exploitMilesight · UR32L | High7.2 |