Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,273All CVEsplus 19,140 rejected
- 462Last 24 hours2,741 in the last 7 days
- 16,922Last 30 days1,555 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 150 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 150 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 150 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 150 |
| 2022 | 8 | 10 | 32 | 7 | 2 | 59 | 150 |
| 2021 | 19 | 15 | 41 | 0 | 0 | 75 | 91 |
| 2020 | 14 | 2 | 0 | 0 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2022-32176 | Gin-vue-admin - Unrestricted File Uploadgin-vue-admin · gin-vue-admin | Critical9.0 |
| CVE-2022-32177 | Gin-vue-admin - Unrestricted File Uploadgin-vue-admin · gin-vue-admin | Critical9.0 |
| CVE-2022-32174 | Gogs - XSSgogs · gogs | Critical9.0 |
| CVE-2022-32175 | AdGuardHome - CSRFAdguardHome · AdguardHome | Medium5.4 |
| CVE-2022-32171 | Zinc - Stored XSSzinc · zinc | Not scored |
| CVE-2022-32172 | Zinc - Cross-Site Scriptingzinc · zinc | Not scored |
| CVE-2022-32173 | OrchardCore - HTML InjectionOrchardCore · OrchardCore | Medium5.4 |
| CVE-2022-32169 | bytebase - Improper Authorizationbytebase · bytebase | Medium4.3 |
| CVE-2022-32170 | bytebase - Improper Authorizationbytebase · bytebase | Medium4.3 |
| CVE-2022-32166 | ovs - buffer over-readovs · ovs | Medium6.1 |
| CVE-2022-32168 | notepad-plus-plus - DLL Hijackingnotepad-plus-plus · notepad-plus-plus | High7.8 |
| CVE-2022-32167 | Cloudreve - Stored XSSCloudreve · Cloudreve | Medium5.4 |
| CVE-2022-32159 | Openlibrary - Stored XSSinfogami · infogami | Low3.5 |
| CVE-2022-23081 | Openlibrary - Reflected XSSopenlibrary · openlibrary | Medium4.3 |
| CVE-2022-23080 | directus - SSRF which leads to internal port scandirectus · directus | Medium5.0 |
| CVE-2022-23079 | motoradmin - host header Injection in the reset password functionalitymotor-admin · motor-admin | Medium6.8 |
| CVE-2022-23078 | Habitica - Open redirect in login pagehabitica · habitica | Medium5.8 |
| CVE-2022-23077 | Habitica - DOM XSS in login pagehabitica · habitica | Medium6.1 |
| CVE-2022-23055 | ERPNext - Improper user access conrolfrappe · frappe | Medium5.5 |
| CVE-2022-23058 | ERPNext - Stored XSS in My Settingsfrappe · frappe | Low3.5 |
| CVE-2022-23056 | ERPNext - Stored XSS leads to account takovererpnext · erpnext | Low3.5 |
| CVE-2022-23057 | ERPNext - Stored XSS in My Profilefrappe · frappe | Medium5.4 |
| CVE-2022-23074 | Recipes - Stored XSS in Name Parameterrecipes · recipes | Low3.5 |
| CVE-2022-23073 | Recipes - Stored XSS in Clipboardrecipes · recipes | Low3.5 |
| CVE-2022-23072 | Recipes - Stored XSS in Add to Cartrecipes · recipes | Low3.5 |
| CVE-2022-23071 | Recipes - SSRF on Importrecipes · recipes | Medium6.5 |
| CVE-2022-23082 | CureKit - Path Traversal in isFileOutsideDirWhiteSource · CureKit | High7.5 |
| CVE-2022-23068 | ToolJet - HTML Injection in Invite New UserToolJet · ToolJet | Medium5.4 |
| CVE-2022-23067 | ToolJet - Token Leakage via Referer HeaderToolJet · ToolJet | High8.8 |
| CVE-2022-23066 | Solana rBPF - Incorrect Calculation in sdiv instructionsolana-labs · rbpf | Critical9.1 |
| CVE-2022-23063 | Shopizer - Insufficient Session Expirationshopizer-ecommerce · Shopizer | High8.8 |
| CVE-2022-23065 | Vendure - XSS via SVG File Uploadvendure-ecommerce · vendure | Medium5.4 |
| CVE-2022-23064 | Snipe-IT - Host Header Injectionsnipe · snipe-it | High8.8 |
| CVE-2022-23061 | Shopizer - IDOR delete superadminshopizer-ecommerce · Shopizer | Medium6.5 |
| CVE-2022-23060 | Shopizer - Stored XSS in Manage Filesshopizer-ecommerce · Shopizer | Medium4.8 |
| CVE-2022-23059 | Shopizer - Stored XSS in Manage Imagesshopizer-ecommerce · Shopizer | Medium4.8 |
| CVE-2022-23054 | Openmct XSS via the “Summary Widget”nasa · openmct | Medium6.1 |
| CVE-2022-23053 | Openmct XSS via the “Condition Widget”nasa · openmct | Medium6.1 |
| CVE-2022-22126 | Openmct XSS via the “Web Page” elementnasa · openmct | Medium6.1 |
| CVE-2021-25992 | ifme - Insufficient Session Expirationifmeorg · ifme | Critical9.8 |
| CVE-2021-25939 | ArangoDB - Blind SSRF when Downloading Foxx Service from URLarangodb · arangodb | Low2.7 |
| CVE-2022-22125 | Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Taghalo-dev · halo | Medium4.8 |
| CVE-2022-22124 | Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Imagehalo-dev · halo | Medium5.4 |
| CVE-2022-22123 | Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Titlehalo-dev · halo | Medium5.4 |
| CVE-2022-22113 | DayByDay CRM - Insufficient Session Expiration after Password ChangeBottelet · DaybydayCRM | High8.8 |
| CVE-2022-22112 | DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)Bottelet · DaybydayCRM | Medium5.4 |
| CVE-2022-22115 | Teedy - Stored Cross-Site Scripting (XSS) in Tag Namesismics · docs | Critical9.0 |
| CVE-2022-22114 | Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionalitysismics · docs | Critical9.6 |
| CVE-2022-22117 | Directus - Stored Cross-Site Scripting (XSS) in Profile Avatar Imagedirectus · directus | Medium5.4 |
| CVE-2022-22116 | Directus - Stored Cross-Site Scripting (XSS) via SVG File Uploaddirectus · directus | Medium5.4 |