Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,161All CVEsplus 18,875 rejected
- 810Last 24 hours3,228 in the last 7 days
- 17,420Last 30 days1,567 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 17 | 123 | 264 | 46 | 1 | 451 | 1,490 |
| 2025 | 2 | 51 | 100 | 28 | 0 | 181 | 1,039 |
| 2024 | 7 | 42 | 101 | 20 | 0 | 170 | 858 |
| 2023 | 3 | 19 | 161 | 27 | 0 | 210 | 688 |
| 2022 | 6 | 22 | 120 | 35 | 0 | 183 | 478 |
| 2021 | 4 | 36 | 108 | 33 | 0 | 181 | 295 |
| 2020 | 2 | 27 | 66 | 19 | 0 | 114 | 114 |
| Title | ||
|---|---|---|
| CVE-2026-121513 | Out-of-bounds Write in µD3TND3TN GmbH · µD3TN | High7.5 |
| CVE-2026-121512 | Missing Release of Memory after Effective Lifetime in µD3TND3TN GmbH · µD3TN | High7.5 |
| CVE-2026-121511 | Out-of-bounds Read in µD3TND3TN GmbH · µD3TN | High7.1 |
| CVE-2026-121510 | Out-of-bounds Write in µD3TND3TN GmbH · µD3TN | High7.5 |
| CVE-2026-121508 | Use After Free in µD3TND3TN GmbH · µD3TN | Medium5.9 |
| CVE-2026-121507 | Double Free in µD3TND3TN GmbH · µD3TN | Medium5.9 |
| CVE-2026-121506 | Out-of-bounds Write in NTPsecNTPsec · NTPsec | High7.4 |
| CVE-2026-121505 | Out-of-bounds Read in NTPsecNTPsec · NTPsec | Low3.7 |
| CVE-2026-110264 | Integer Overflow or Wraparound in GitLabGitLab · GitLab | Critical10.0 |
| CVE-2026-12664 | Incorrect Authorization in GitLabGitLab · GitLab | Medium6.8 |
| CVE-2026-13319 | Authorization Bypass Through User-Controlled Key in GitLabGitLab · GitLab | Medium4.3 |
| CVE-2026-14288 | Use of Incorrectly-Resolved Name or Reference in GitLabGitLab · GitLab | Low3.1 |
| CVE-2026-15723 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLabGitLab · GitLab | High8.2 |
| CVE-2026-16255 | Incorrect Authorization in GitLabGitLab · GitLab | Medium5.9 |
| CVE-2026-103515 | Incorrect Authorization in GitLabGitLab · GitLab | Low2.7 |
| CVE-2026-105711 | Use of Cache Containing Sensitive Information in GitLabGitLab · GitLab | Low3.5 |
| CVE-2026-105777 | Insertion of Sensitive Information Into Sent Data in GitLabGitLab · GitLab | Medium4.3 |
| CVE-2026-112378 | Use of Less Trusted Source in GitLabGitLab · GitLab | Medium4.3 |
| CVE-2026-112212 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLabGitLab · GitLab | High7.5 |
| CVE-2026-112326 | Improper Cleanup on Thrown Exception in GitLabGitLab · GitLab | Low3.1 |
| CVE-2026-114490 | Incorrect Authorization in hMailServerProgressive Robot Ltd · hMailServer | High7.8 |
| CVE-2026-114489 | Missing Authorization in hMailServerProgressive Robot Ltd · hMailServer | High8.1 |
| CVE-2026-114479 | Not Failing Securely ('Failing Open') in hMailServerProgressive Robot Ltd · hMailServer | Medium5.8 |
| CVE-2026-114478 | Unintended Proxy or Intermediary ('Confused Deputy') in hMailServerProgressive Robot Ltd · hMailServer | Medium5.9 |
| CVE-2026-114477 | Missing Authorization in hMailServerProgressive Robot Ltd · hMailServer | Medium4.3 |
| CVE-2026-114476 | Incorrect Authorization in hMailServerProgressive Robot Ltd · hMailServer | High7.5 |
| CVE-2026-114475 | Missing Authorization in hMailServerProgressive Robot Ltd · hMailServer | Medium6.5 |
| CVE-2026-114474 | Use of Less Trusted Source in hMailServerProgressive Robot Ltd · hMailServer | Medium5.9 |
| CVE-2026-114473 | Incorrect Authorization in hMailServerProgressive Robot Ltd · hMailServer | Medium5.0 |
| CVE-2026-114472 | Insufficient Resource Pool in hMailServerProgressive Robot Ltd · hMailServer | Low3.7 |
| CVE-2026-114471 | Insertion of Sensitive Information into Log File in hMailServerProgressive Robot Ltd · hMailServer | Medium4.7 |
| CVE-2026-114470 | Cross-Site Request Forgery (CSRF) in hMailServerProgressive Robot Ltd · hMailServer | Medium5.3 |
| CVE-2026-102486 | Out-of-bounds Read in ntpsecNTPsec · ntpsec | High7.5 |
| CVE-2026-102485 | Out-of-bounds Read in ntpsecNTPsec · ntpsec | Medium5.2 |
| CVE-2026-102484 | Heap-based Buffer Overflow in ntpsecNTPsec · ntpsec | Medium6.4 |
| CVE-2026-102483 | Reachable Assertion in ntpsecNTPsec · ntpsec | High7.5 |
| CVE-2026-107571 | Incorrect Default Permissions in hMailServerProgressive Robot Ltd · hMailServer | High7.8 |
| CVE-2026-107569 | Unchecked Input for Loop Condition in hMailServerProgressive Robot Ltd · hMailServer | High7.5 |
| CVE-2026-107566 | Missing Authorization in hMailServerProgressive Robot Ltd · hMailServer | Medium6.5 |
| CVE-2026-107568 | Missing Authorization in hMailServerProgressive Robot Ltd · hMailServer | Medium6.5 |
| CVE-2026-107567 | Use of Less Trusted Source in hMailServerProgressive Robot Ltd · hMailServer | High7.5 |
| CVE-2026-96425 | Incorrect Permission Assignment for Critical Resource in lomiri-download-managerUBports · lomiri-download-manager | Medium5.5 |
| CVE-2026-96424 | Incorrect Permission Assignment for Critical Resource in lomiri-download-managerUBports · lomiri-download-manager | High7.8 |
| CVE-2026-18516 | Improper Encoding or Escaping of Output in Crafty ControllerArcadia Technology, LLC · Crafty Controller | Critical9.6 |
| CVE-2026-90821 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty ControllerArcadia Technology, LLC · Crafty Controller | Medium5.4 |
| CVE-2026-109119 | Missing Authorization in rdiffwebikus-soft · rdiffweb | High8.8 |
| CVE-2026-109118 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffwebikus-soft · rdiffweb | Medium4.6 |
| CVE-2026-5954 | Incorrect Authorization in GitLabGitLab · GitLab | Medium4.2 |
| CVE-2026-6567 | Incorrect Authorization in GitLabGitLab · GitLab | Medium4.3 |
| CVE-2026-7767 | URL Redirection to Untrusted Site ('Open Redirect') in GitLabGitLab · GitLab | Medium5.8 |