Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,673All CVEsplus 19,141 rejected
- 692Last 24 hours2,975 in the last 7 days
- 17,156Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 2 | 4 | 0 | 9 | 20 |
| 2025 | 4 | 2 | 3 | 0 | 0 | 9 | 11 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2023 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-79957 | ServiceNext Insecure Direct Object Reference via GetUsariosServiceNext · SerTec | High8.1 |
| CVE-2026-14967 | Path traversal in github_workflows allows writing artifacts outside output directoryBlack Lantern Security · BBOT | Low3.1 |
| CVE-2026-14966 | Symlink guard bypass in unarchive module allows planting symlinks during extractionBlack Lantern Security · BBOT | Low3.1 |
| CVE-2026-12568 | Arbitrary File Write in postman_download moduleBlack Lantern Security · BBOT | Medium6.5 |
| CVE-2026-12567 | Symlink-following arbitrary write via github_workflows moduleBlack Lantern Security · BBOT | Low2.2 |
| CVE-2026-12566 | SSRF via unvalidated WWW-Authenticate realm in docker_pull moduleBlack Lantern Security · BBOT | Low3.1 |
| CVE-2026-12565 | Path Traversal (Zip-Slip) in unarchive moduleBlack Lantern Security · BBOT | Medium5.3 |
| CVE-2026-10880 | Unauthenticated SQL Injection in Osnexus QuantastorOsnexus · QuantaStor | Critical9.8 |
| CVE-2026-2103 | Use of Hard-Coded Cryptographic Key for Password StorageInfor · SyteLine ERP | High7.1 |
| CVE-2025-12463 | Unauthenticated SQL Injection in Guetebruck G-Cam Series CamerasGuetebruck · G-Cam | Critical9.8 |
| CVE-2025-10284 | Improper Archive Extraction in unarchive Enables RCEBLSOPS, LLC · bbot | Critical9.6 |
| CVE-2025-10283 | Improper .git Sanitization in gitdumper Enables RCEBLSOPS, LLC · bbot | Critical9.6 |
| CVE-2025-10282 | GitLab Domain Confusion in gitlab Leaks API KeyBLSOPS, LLC · bbot | Medium4.7 |
| CVE-2025-10281 | Insecure URL Handling in git_clone Leading to Leaked API KeyBLSOPS, LLC · bbot | Medium4.7 |
| CVE-2025-10183 | XML External Entity Injection in TecConnect 4.1TecCom · TecConnect | Critical9.1 |
| CVE-2025-6002 | VirtueMart - Unrestricted File UploadVirtueMart · VirtueMart | High7.2 |
| CVE-2025-6001 | VirtueMart - Cross Site Request Forgery (CSRF)VirtueMart · VirtueMart | High8.3 |
| CVE-2025-1888 | Reflected Cross Site Scripting in Aperio Eslide ManagerLeica BioSystems · Aperio Eslide Manager | Medium4.6 |
| CVE-2023-3434 | QRC Handler without Input Validation in JamiSavoir-faire Linux · Jami | Medium4.4 |
| CVE-2023-3433 | Local Denial of Service in JamiSavoir-faire Linux · Jami | Medium5.5 |