Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,467All CVEsplus 19,159 rejected
  • 640Last 24 hours4,914 in the last 7 days
  • 18,831Last 30 days1,597 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202601200348
202500000045
202402110445
202300310441
20222214001837
2021256301619
20201200033

Latest CVEs

48 CVEs, newest first

CVEs, newest first
Title
CVE-2026-1759
Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager:…Secomea · GateManager
Medium6.5
CVE-2026-1758
Session FixationSecomea · GateManager
High8.3
CVE-2025-14716
Unauthorized access to informationSecomea · GateManager
Medium6.5
CVE-2021-32007
Missing security header: Referrer-Policy URLSecomea · GateManager
Low3.5
CVE-2024-1969
Heap buffer overflowSecomea · GateManager
High8.2
CVE-2024-1579
Insufficient seeding of random number generatorSecomea · GateManager
High8.1
CVE-2023-3675
Insufficient input validation when downloading certain file types.Secomea · GateManager
Medium6.5
CVE-2023-2912
SiteManager Embedded service disruptionSecomea · SiteManager Embedded
Medium5.9
CVE-2022-38125
FTP Agent forwards traffic on inactive ports to LinkManagerSecomea · SiteManager
Low2.9
CVE-2023-0317
GateManager debug interface is included in non-debug buildsSecomea · GateManager
Medium4.9
CVE-2022-4308
Clear-text passwords in configuration filesSecomea · GateManager
Medium6.1
CVE-2022-38124
Unwanted debug toolSecomea · SiteManager
Medium5.7
CVE-2022-2752
Potential vulnerabilities in GM login processSecomea · GateManager
Medium5.5
CVE-2022-38123
Insufficient validation of plugin filesSecomea · GateManager
High8.7
CVE-2022-25786
GateManager debug interface is included in production buildsSecomea · GateManager
Medium4.9
CVE-2022-25787
GTA URLs issued by LMM WEB API may leak informationSecomea · GateManager
High7.5
CVE-2022-25785
Buffer overrunSecomea · SiteManager
Medium6.6
CVE-2022-25784
User controllable HTML element attribute (potential XSS)Secomea · SiteManager
Critical9.1
CVE-2022-25783
Hacking attempts from logged-in users are not properly logged by GMSecomea · GateManager
Medium4.3
CVE-2022-25782
Insufficient privilege checks on object access and updates.Secomea · GateManager
Medium5.4
CVE-2022-25781
Reflected XSS issues in GateManagerSecomea · GateManager
Medium4.2
CVE-2022-25780
Information leak via device availability query functionSecomea · GateManager
Medium4.3
CVE-2022-25779
Insufficient scope checks allows adding unrelated audit log entriesSecomea · GateManager
Medium4.3
CVE-2022-25778
Unload handlers may unintentionally defeat CSRF guardsSecomea · GateManager
Medium4.2
CVE-2021-32010
Clients may connect to a GateManager with TLS 1.0Secomea · SiteManager
Medium5.6
CVE-2021-32009
Missing XSS guards on firmware pageSecomea · GateManager
Medium5.0
CVE-2021-32005
SiteManager Log View XSS IssueSecomea · SiteManager
Medium6.5
CVE-2021-32006
GateManager information leak for LinkManager UsersSecomea · GateManager
Medium5.0
CVE-2021-32008
Logged-in Administrator may get unrestricted file system accessSecomea · GateManager
Critical9.9
CVE-2021-32004
GateManager does not enforce strict hostname matching for WEB serverSecomea · GateManager
Low3.7
CVE-2021-32003
Configuration service port remains open 10 minutes after reboot even when already provisionedSecomea · SiteManager
High8.0
CVE-2021-32002
SiteManager troubleshooter allows access without authentication from local networkSecomea · SiteManager
Medium4.3
CVE-2020-29030
Insufficient CSRF guardsSecomea · GateManager
High8.1
CVE-2020-29020
Reject Remote Management via Cellular UPLINK2Secomea · SiteManager
Critical9.1
CVE-2020-29028
Reflected XSS issuesSecomea · GateManager
Medium6.3
CVE-2020-29029
XSS issue due to insufficient sanitization of input fieldSecomea · GateManager
High7.3
CVE-2020-29032
Add integrity check of GateManager firmwareSecomea · GateManager
High8.4
CVE-2020-29027
Reflected Cross Site ScriptingSecomea · SiteManager
Medium5.4
CVE-2020-29025
DOM-based Javascript injectionSecomea · SiteManager Embedded (SM-E)
Medium5.4
CVE-2020-29023
CSV Formula Injection possible due to improper fields escaping in GateManagerSecomea · GateManager
Low3.5
CVE-2020-29022
Host Header Injection allowing web cache poisoning attacksSecomea · GateManager
Medium5.3
CVE-2020-29024
Missing HtppOnly and Secure flagsSecomea · GateManager
Medium5.3
CVE-2020-29031
Insecure Direct Object Reference in GateManager WebUI can cause privilege escalationSecomea · GateManager
High7.1
CVE-2020-29026
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions…Secomea · GateManager
Critical9.0
CVE-2020-29021
Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)Secomea · GateManager
Low3.5
CVE-2020-14512
USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916Secomea · GateManager
High8.1
CVE-2020-14510
OFF-BY-ONE ERROR CWE-193Secomea · GateManager
Critical9.8
CVE-2020-14508
OFF-BY-ONE ERROR CWE-193Secomea · GateManager
High8.1