Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,676All CVEsplus 19,114 rejected
- 399Last 24 hours2,823 in the last 7 days
- 17,126Last 30 days1,580 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 8 | 4 | 1 | 0 | 18 | 274 |
| 2025 | 4 | 13 | 21 | 0 | 0 | 38 | 256 |
| 2024 | 16 | 28 | 28 | 0 | 0 | 72 | 218 |
| 2023 | 15 | 43 | 26 | 0 | 0 | 84 | 146 |
| 2022 | 4 | 5 | 44 | 0 | 0 | 53 | 62 |
| 2021 | 0 | 2 | 7 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-45452 | Unitronics - CWE-134 Use of Externally-Controlled format stringUnitronics · Unitronics UniStream Pro/UniLogic | High8.3 |
| CVE-2026-45451 | Unitronics - CWE-287: Improper AuthenticationUnitronics · Unitronics UniStream Pro/UniLogic | High8.3 |
| CVE-2026-45450 | Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory BufferUnitronics · Unitronics UniStream Pro/UniLogic | High8.3 |
| CVE-2026-45449 | Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Unitronics · Unitronics UniStream Pro/UniLogic | High8.3 |
| CVE-2026-108925 | Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)Cohesity · NetBackup Administration Console web interface | Medium6.1 |
| CVE-2026-59508 | Interuse i-Bos CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Interuse · i-Bos | Medium5.9 |
| CVE-2026-59507 | Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access ControlPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions) | Critical9.3 |
| CVE-2026-59506 | Priority – CWE-306: Missing Authentication for Critical FunctionPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions) | Critical9.3 |
| CVE-2026-59505 | Priority - CWE-284: Improper Access ControlPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions) | High8.6 |
| CVE-2026-59504 | Priority – CWE-602: Client-Side Enforcement of Server-Side SecurityPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions) | Critical9.1 |
| CVE-2026-59503 | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized ActorPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions) | Critical9.1 |
| CVE-2026-59502 | Priority - CWE-203: Observable DiscrepancyPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions) | Medium5.3 |
| CVE-2026-59501 | Priority – CWE-284: Improper Access ControlPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions) | High8.2 |
| CVE-2026-59500 | Priority - CWE-287: Improper AuthenticationPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions) | Critical10.0 |
| CVE-2026-59499 | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized ActorPriority · Portal Generator addon to Priority ERP (developed by Soft Solutions). | High8.6 |
| CVE-2026-45448 | ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')ntop · ntopng | Medium4.3 |
| CVE-2026-6923 | Nuvoton - CWE-1300: Improper Protection of Physical Side ChannelsNuvoton · NPCT7xx | Low3.8 |
| CVE-2025-55065 | CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Kopek Reem · ReKord client | High7.5 |
| CVE-2025-55064 | Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Priority · Web | Medium4.8 |
| CVE-2025-55063 | Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Priority · Web | Medium4.8 |
| CVE-2025-55062 | Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Priority · Web | Medium4.8 |
| CVE-2025-55061 | Priority - CWE-434 Unrestricted Upload of File with Dangerous TypePriority · Web | High8.8 |
| CVE-2025-55060 | Priority - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')Priority · Web | Medium6.1 |
| CVE-2025-55059 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Rumpus · FTP Server | Medium4.8 |
| CVE-2025-55058 | CWE-20 Improper Input ValidationRumpus · FTP Server | Medium4.5 |
| CVE-2025-55057 | Multiple CWE-352 Cross-Site Request Forgery (CSRF)Rumpus · FTP Server | Medium4.5 |
| CVE-2025-55056 | Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Rumpus · FTP Server | Medium4.8 |
| CVE-2025-55055 | CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Rumpus · FTP Server | Medium6.8 |
| CVE-2025-55054 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Baicells · EG7035E-M11 | Medium6.1 |
| CVE-2025-55053 | CWE-328: Use of Weak HashBaicells · NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 | Medium6.5 |
| CVE-2025-55052 | CWE-200 Exposure of Sensitive Information to an Unauthorized ActorBaicells · NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, NOVA227 | Medium4.3 |
| CVE-2025-55051 | CWE-1392: Use of Default CredentialsBaicells · NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 | Critical10.0 |
| CVE-2025-55050 | CWE-1242: Inclusion of Undocumented FeaturesBaicells · NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 | Critical9.8 |
| CVE-2025-55049 | Use of Default Cryptographic Key (CWE-1394)Baicells · NEUTRINO430 | Critical9.1 |
| CVE-2025-55048 | Multiple CWE-78Baicells · NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, NOVA227 | Critical9.8 |
| CVE-2025-55047 | CWE-798 Use of Hard-coded CredentialsBaicells · SPECTRA LTE-U eNB | High8.4 |
| CVE-2025-46391 | CWE-284: Improper Access ControlEmby · MediaBrowser | Medium6.5 |
| CVE-2025-46390 | CWE-204: Observable Response DiscrepancyEmby · MediaBrowser | High7.5 |
| CVE-2025-46389 | CWE-620: Unverified Password ChangeEmby · MediaBrowser | Medium6.5 |
| CVE-2025-46388 | CWE-200 Exposure of Sensitive Information to an Unauthorized ActorEmby · MediaBrowser | Medium4.3 |
| CVE-2025-46387 | CWE-639 Authorization Bypass Through User-Controlled KeyEmby · MediaBrowser | High8.8 |
| CVE-2025-46386 | CWE-639 Authorization Bypass Through User-Controlled KeyEmby · MediaBrowser | High8.8 |
| CVE-2025-46385 | CWE-918 Server-Side Request Forgery (SSRF)Emby · Windows | High8.6 |
| CVE-2025-46384 | CWE-434 Unrestricted Upload of File with Dangerous TypeEmby · Windows | High8.8 |
| CVE-2025-46383 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Emby · Windows | Medium6.1 |
| CVE-2025-46382 | CWE-200 Exposure of Sensitive Information to an Unauthorized ActorCyberArk · IDP | Medium5.3 |
| CVE-2025-23183 | UBtech – CWE-601: URL Redirection to Untrusted Site ('Open Redirect')UBtech · Freepass | Medium6.1 |
| CVE-2025-23182 | UBtech – CWE-203: Observable DiscrepancyUBtech · Freepass | Medium4.3 |
| CVE-2025-23181 | Ribbon Communications - CWE-250: Execution with Unnecessary PrivilegesRibbon Communications · Apollo 9608 | High8.0 |
| CVE-2025-23180 | Ribbon Communications - CWE-250: Execution with Unnecessary PrivilegesRibbon Communications · Apollo 9608 | High8.0 |