Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,582All CVEsplus 19,172 rejected
- 126Last 24 hours4,783 in the last 7 days
- 16,501Last 30 days1,453 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 20 |
| 2025 | 2 | 3 | 3 | 1 | 0 | 9 | 20 |
| 2024 | 5 | 3 | 1 | 1 | 0 | 10 | 11 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2025-14817 | Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADBTECNO · Tecno Pova6 Pro 5G | Medium6.5 |
| CVE-2025-9056 | Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation.TECNO · com.transsion.audiosmartconnect | Medium5.3 |
| CVE-2025-7703 | Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage.TECNO · tech.palm.id | Low3.1 |
| CVE-2025-6172 | Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operation.TECNO · com.afmobi.boomplayer | Critical9.8 |
| CVE-2025-4737 | Insufficient encryption vulnerability in the mobile application (com.transsion.aivoiceassistant) may lead to the risk of sensitive information leakage.TECNO · com.transsion.aivoiceassistant | Medium6.2 |
| CVE-2025-3698 | Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk.TECNO · com.transsion.carlcare | High7.5 |
| CVE-2025-2190 | The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.TECNO · com.transsnet.store | High8.1 |
| CVE-2025-1298 | Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.TECNO · com.transsion.carlcare | Critical9.8 |
| CVE-2025-0590 | Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.TECNO · com.transsion.carlcare | High7.5 |
| CVE-2024-12603 | A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.TECNO · com.transsion.applock | Critical9.8 |
| CVE-2024-11206 | Unauthorized access vulnerability in the mobile application (com.transsion.phoenix) can lead to the leakage of user information.TECNO · com.transsion.phoenix | High7.5 |
| CVE-2024-10195 | Tecno 4G Portable WiFi TR118 SMS Check goform_get_cmd_process sql injectionTecno · 4G Portable WiFi TR118 | Medium5.1 |
| CVE-2024-10018 | Improper permission control in the mobile application (com.transsion.aivoiceassistant) can lead to the launch of any unexported component.TECNO · com.transsion.aivoiceassistant | Critical9.8 |
| CVE-2024-8039 | Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.TECNO · com.afmobi.boomplayer | Critical9.8 |
| CVE-2024-7697 | Logical vulnerability in com.transsion.carlcareTECNO · com.transsion.carlcare | High7.5 |
| CVE-2024-6780 | Improper permission control in com.android.server.telecomTECNO · com.android.server.telecom | Low3.3 |
| CVE-2024-5163 | Improper permission settings in com.transsion.carlcareTECNO · com.transsion.carlcare | Critical9.8 |
| CVE-2024-4988 | Improper permission control in com.transsion.videocallenhancerTECNO · com.transsion.videocallenhancer | High7.5 |
| CVE-2024-3701 | Improper Authentication in com.transsion.kolun.aiserviceTECNO · com.transsion.kolun.aiservice | Critical9.8 |
| CVE-2023-6304 | Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injectionPublic exploitTecno · 4G Portable WiFi TR118 | High7.2 |