Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 404,724All CVEsplus 19,157 rejected
- 2,018Last 24 hours4,647 in the last 7 days
- 18,864Last 30 days1,622 of them critical
- 1,773Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 127 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 127 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 127 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 127 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 127 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 127 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 127 |
| 2019 | 7 | 7 | 2 | 0 | 0 | 16 | 127 |
| 2018 | 29 | 53 | 20 | 4 | 0 | 106 | 111 |
| 2017 | 0 | 5 | 0 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2019-5042 | An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can…Talos · Aspose.PDF for C++ | High8.8 |
| CVE-2019-5067 | An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can…Talos · Aspose | Critical9.8 |
| CVE-2019-5066 | An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can…Talos · Aspose | Critical9.8 |
| CVE-2019-5017 | An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functionality of at least…Talos · KCodes | Medium5.8 |
| CVE-2019-5016 | An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least…Talos · KCodes | Critical10.0 |
| CVE-2018-4048 | An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit…Talos · GOG Galaxy | Critical9.3 |
| CVE-2018-4050 | An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can…Talos · GOG Galaxy | High7.1 |
| CVE-2018-4059 | An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server…Talos · coTURN | Medium6.5 |
| CVE-2018-4058 | An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server…Talos · coTURN | High7.7 |
| CVE-2019-5015 | A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can…Talos · Pixar Renderman | Critical9.0 |
| CVE-2018-4055 | A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local…Talos · Pixar Renderman | High7.1 |
| CVE-2018-4054 | A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local…Talos · Pixar Renderman | Critical9.0 |
| CVE-2018-3980 | An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. A specially crafted TIFF image processed via the…Talos · ACD Systems | High8.8 |
| CVE-2018-3976 | An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28. A specially crafted CAL image…Talos · ACD Systems | High8.8 |
| CVE-2018-3973 | An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image processed via the…Talos · ACD Systems | High8.8 |
| CVE-2018-4056 | An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially…Talos · coTURN | Critical9.1 |
| CVE-2018-4040 | An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specially crafted…Talos · Atlantis Word Processor | High8.8 |
| CVE-2018-4039 | An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can allow an attacker to…Talos · Atlantis Word Processor | High8.8 |
| CVE-2018-4038 | An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to…Talos · Atlantis Word Processor | High8.8 |
| CVE-2018-3951 | An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. A specially crafted HTTP…Talos · TP-Link | High7.2 |
| CVE-2018-3950 | An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3…Talos · TP-Link | High7.2 |
| CVE-2018-3949 | An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a…Talos · TP-Link | High7.5 |
| CVE-2018-3971 | An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP…Talos · Sophos | Critical9.3 |
| CVE-2018-3970 | An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP…Talos · Sophos | Medium4.0 |
| CVE-2018-3981 | An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this…Talos · ACD Systems | High8.8 |
| CVE-2018-3885 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections…Talos · ERPNext | Medium5.4 |
| CVE-2018-3884 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections…Talos · ERPNext | Medium5.4 |
| CVE-2018-3883 | An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections…Talos · ERPNext | Medium5.4 |
| CVE-2018-4010 | An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause…Talos · ProtonVPN | High8.8 |
| CVE-2018-3952 | An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a…Talos · NordVPN | High8.8 |
| CVE-2018-3926 | An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 -…Talos · Samsung | Medium5.3 |
| CVE-2018-3909 | An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The…Talos · Samsung | Critical9.1 |
| CVE-2018-3907 | An exploitable vulnerability exists in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The…Talos · Samsung | Critical9.1 |
| CVE-2018-3903 | On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON…Talos · Samsung | Critical9.9 |
| CVE-2018-3938 | An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00.…Talos · Sony | Critical9.1 |
| CVE-2018-3937 | An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A…Talos · Sony | Critical9.1 |
| CVE-2017-16252 | Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause a stack-based buffer overflow…Talos · Insteon | High8.5 |
| CVE-2017-14447 | An exploitable buffer overflow vulnerability exists in the PubNub message handler for the 'ad' channel of Insteon Hub running firmware version 1012. Specially…Talos · Insteon | High8.5 |
| CVE-2018-3841 | A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). The vulnerability is present in the parsing of a network packet…Talos · Pixar Renderman | Medium5.3 |
| CVE-2018-3840 | A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is present in the parsing of a network packet…Talos · Pixar Renderman | Medium5.3 |
| CVE-2018-3852 | An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a…Talos · Ocularis | High7.5 |
| CVE-2018-3853 | An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF…Talos · Foxit | High8.8 |
| CVE-2017-12092 | An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially…Talos · Allen Bradley | Low3.7 |
| CVE-2016-9042 | An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network…Talos · Network Time Protocol | Low3.7 |
| CVE-2016-8390 | An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.11.20. A specially crafted ELF file can…Talos · Hopper | High7.5 |
| CVE-2017-2860 | An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek NeuroWorks 8. A specially crafted network…Talos · Natus | High7.5 |
| CVE-2017-2858 | An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet…Talos · Natus | High7.5 |
| CVE-2017-2852 | An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek NeuroWorks 8. A specially crafted network…Talos · Natus | High7.5 |
| CVE-2017-2815 | An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval…Talos · Open Fire User Import Export Plugin | High8.1 |
| CVE-2017-14439 | Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can…Talos · Moxa | High7.5 |