Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,556All CVEsplus 18,890 rejected
- 409Last 24 hours3,027 in the last 7 days
- 17,426Last 30 days1,598 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 7 | 21 | 0 | 0 | 0 | 28 | 113 |
| 2025 | 3 | 43 | 0 | 0 | 0 | 46 | 85 |
| 2024 | 2 | 22 | 2 | 0 | 0 | 26 | 39 |
| 2023 | 1 | 5 | 7 | 0 | 0 | 13 | 13 |
| Title | ||
|---|---|---|
| CVE-2026-105412 | SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5Dassault Systèmes · Tuleap Enterprise Edition | High7.1 |
| CVE-2026-105411 | Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes · Tuleap Enterprise Edition | High8.1 |
| CVE-2026-105410 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes · Tuleap Enterprise Edition | High8.7 |
| CVE-2026-105409 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes · Tuleap Enterprise Edition | High8.7 |
| CVE-2026-105408 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes · Tuleap Enterprise Edition | High8.7 |
| CVE-2026-105407 | OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes · Tuleap Enterprise Edition | High8.8 |
| CVE-2026-84154 | Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026xDassault Systèmes · GEOVIA Geospatial Data Manager | Critical9.9 |
| CVE-2026-84285 | OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5Dassault Systèmes · Tuleap Enterprise Edition | High8.8 |
| CVE-2026-16279 | Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026xDassault Systèmes · 3DSwymer | Critical9.3 |
| CVE-2026-19851 | Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes · Tuleap Enterprise Edition | High7.7 |
| CVE-2026-17061 | Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026Dassault Systèmes · SIMULIA Execution Engine | Critical10.0 |
| CVE-2026-11756 | Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026xDassault Systèmes · Station Launcher App in 3DEXPERIENCE platform | Critical10.0 |
| CVE-2026-14165 | Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5Dassault Systèmes · Tuleap Enterprise Edition | High7.5 |
| CVE-2026-9695 | Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026Dassault Systèmes · DELMIA Apriso | Critical9.8 |
| CVE-2026-5120 | Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026Dassault Systèmes · BIOVIA Workbook | High8.1 |
| CVE-2026-10094 | Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026Dassault Systèmes · SOLIDWORKS Visualize | Critical9.8 |
| CVE-2026-9024 | Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026xDassault Systèmes · DELMIA Service Process Engineer | High8.7 |
| CVE-2026-7858 | Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026xDassault Systèmes · Teamwork Cloud - Standard Edition | Critical9.8 |
| CVE-2025-10559 | Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes · DELMIA Factory Resource Manager | High7.1 |
| CVE-2025-10553 | Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes · DELMIA Factory Resource Manager | High8.7 |
| CVE-2025-10551 | Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes · ENOVIA Collaborative Industry Innovator | High8.7 |
| CVE-2026-3476 | Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026Dassault Systèmes · SOLIDWORKS Desktop | High7.8 |
| CVE-2026-2101 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19Dassault Systèmes · ENOVIAvpm Web Access | High8.7 |
| CVE-2026-1335 | Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2026-1334 | Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2026-1333 | Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2026-1284 | Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2026-1283 | Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-12956 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025xDassault Systèmes · ENOVIA Collaborative Industry Innovator | High8.7 |
| CVE-2025-10555 | Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025xDassault Systèmes · DELMIA Service Process Engineer | High8.7 |
| CVE-2025-10554 | Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes · ENOVIA Product Manager | High8.7 |
| CVE-2025-10558 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025xDassault Systèmes · 3DSwymer | High8.7 |
| CVE-2025-10557 | Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025xDassault Systèmes · ENOVIA Collaborative Industry Innovator | High8.7 |
| CVE-2025-10556 | Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes · ENOVIA Specification Manager | High8.7 |
| CVE-2025-10552 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025xDassault Systèmes · 3DSwymer | High8.7 |
| CVE-2025-9976 | OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025xDassault Systèmes · Station Launcher App in 3DEXPERIENCE platform | Critical9.0 |
| CVE-2025-9450 | Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-9449 | Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-9447 | Out-Of-Bounds Read affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-6205 | Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025ExploitedDassault Systèmes · DELMIA Apriso | Critical9.1 |
| CVE-2025-6204 | Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025ExploitedDassault Systèmes · DELMIA Apriso | High8.0 |
| CVE-2025-7042 | Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-6974 | Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-6973 | Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-6972 | Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-6971 | Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-0831 | Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes · SOLIDWORKS eDrawings | High7.8 |
| CVE-2025-4987 | Stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes · Project Portfolio Manager | High8.7 |
| CVE-2025-5086 | Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025ExploitedDassault Systèmes · DELMIA Apriso | Critical9.0 |
| CVE-2025-0602 | Stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes · Collaborative Industry Innovator | High8.7 |