Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,562All CVEsplus 18,890 rejected
- 402Last 24 hours3,030 in the last 7 days
- 17,425Last 30 days1,598 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 57 |
| 2025 | 0 | 2 | 0 | 1 | 0 | 3 | 57 |
| 2024 | 0 | 42 | 10 | 2 | 0 | 54 | 54 |
| Title | ||
|---|---|---|
| CVE-2025-1723 | Account takeoverManageEngine · ADSelfService Plus | High8.1 |
| CVE-2024-9097 | IDORManageEngine · Endpoint Central | Low3.5 |
| CVE-2024-41140 | Improper AuthorizationManageEngine · Applications Manager | High8.1 |
| CVE-2024-52323 | Sensitive Data ExposureManageEngine · Analytics Plus | High8.1 |
| CVE-2024-49574 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-10839 | XML External EntityManageEngine · SharePoint Manager Plus | High8.5 |
| CVE-2024-24409 | Privilege EscalationManageEngine · ADManager Plus | High8.8 |
| CVE-2024-10203 | Agent Arbitrary File DeletionManageEngine · EndPoint Central | High7.0 |
| CVE-2024-9459 | SQL InjectionManageEngine · Exchange Reporter Plus | High8.3 |
| CVE-2024-36485 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-48878 | SQL InjectionManageEngine · ADManager Plus | High8.3 |
| CVE-2024-5608 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-9100 | Local File InclusionManageEngine · Analytics Plus | Medium6.5 |
| CVE-2024-38868 | Incorrect AuthorizationManageEngine · Endpoint Central | High7.6 |
| CVE-2024-6204 | SQL injectionManageEngine · Exchange Reporter Plus | High8.3 |
| CVE-2024-5546 | SQL InjectionManageEngine · Password Manager Pro | High8.3 |
| CVE-2024-41150 | Stored XSSManageEngine · ServiceDesk Plus | Medium6.3 |
| CVE-2024-38869 | Incorrect AuthorizationManageEngine · Endpoint Central | High8.3 |
| CVE-2024-5586 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-5556 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-5490 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-36514 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-36515 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-36516 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-36517 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-5467 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-5466 | Remote Code ExecutionManageEngine · OpManager, Remote Monitoring and Management | High8.8 |
| CVE-2024-36034 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-36035 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-36518 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-5487 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-5527 | SQL InjectionManageEngine · ADAudit Plus | High8.3 |
| CVE-2024-5678 | SQL InjectionManageEngine · Applications Manager | Medium4.7 |
| CVE-2024-6748 | SQL InjectionManageEngine · OpManager | High8.3 |
| CVE-2024-38872 | SQL InjectionManageEngine · Exchange Reporter Plus | High8.3 |
| CVE-2024-38871 | SQL InjectionManageEngine · Exchange Reporter Plus | High8.3 |
| CVE-2024-38870 | Stored XSSManageEngine · OpManager, OpManager Plus, OpManager MSP, OpManager Enterprise Edition | Low3.5 |
| CVE-2024-5471 | Agent takeoverManageEngine · DDI Central | High8.8 |
| CVE-2024-27311 | Arbitrary file writingManageEngine · DDI Central | Medium5.5 |
| CVE-2024-36038 | Stored XSSManageEngine · OpManager | Medium6.3 |
| CVE-2024-27313 | XSS VulnerabilityManageEngine · PAM360 | Medium6.3 |
| CVE-2024-36037 | Insufficient Access Control VulnerabilityManageEngine · ADAudit Plus | Medium5.5 |
| CVE-2024-36036 | Insufficient Access Control VulnerabilityManageEngine · ADAudit Plus | Medium4.2 |
| CVE-2024-27310 | DOS VulnerabilityManageEngine · ADSelfService Plus | Medium5.3 |
| CVE-2024-27314 | Stored XSS VulnerabilityManageEngine · ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus | Low2.4 |
| CVE-2024-21791 | SQL Injection in ADAudit PlusManageEngine · ADAudit Plus | Medium4.7 |
| CVE-2023-49335 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.ManageEngine · ADAudit Plus | High8.3 |
| CVE-2023-49334 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.ManageEngine · ADAudit Plus | High8.3 |
| CVE-2023-49333 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.ManageEngine · ADAudit Plus | High8.3 |
| CVE-2023-49332 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.ManageEngine · ADAudit Plus | High8.3 |