Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,273All CVEsplus 19,140 rejected
- 466Last 24 hours2,759 in the last 7 days
- 16,923Last 30 days1,555 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 8 | 8 | 3 | 0 | 0 | 19 | 53 |
| 2025 | 1 | 2 | 8 | 0 | 0 | 11 | 34 |
| 2024 | 2 | 5 | 7 | 3 | 0 | 17 | 23 |
| 2023 | 2 | 3 | 1 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-115731 | Report Deserialization Code ExecutionPerforce · Puppet Enterprise | Critical9.4 |
| CVE-2026-115732 | Certificate Name Authorization BypassPerforce · Puppet Enterprise | Critical9.0 |
| CVE-2026-103509 | Credential Disclosure in P4 Search Configuration APIPerforce · P4 (Helix core) | High8.5 |
| CVE-2026-103508 | Path traversal via logging configuration in P4SearchPerforce · P4 (Helix core) | High7.3 |
| CVE-2026-109758 | Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM…Perforce · Helix Authentication Service | Critical9.3 |
| CVE-2026-103510 | Authentication bypass via blank auth token in P4SearchPerforce · P4 (Helix Core) | Critical9.5 |
| CVE-2026-103511 | Arbitrary file-write via extension installation in P4SearchPerforce · P4 (Helix Core) | Medium5.1 |
| CVE-2026-103512 | Ticket host-binding bypass via spoofed client IP in P4SearchPerforce · P4 (Helix Core) | Medium5.3 |
| CVE-2026-103507 | Arbitrary file-write via log configuration path in P4SearchPerforce · P4 (Helix Core) | High7.5 |
| CVE-2026-100102 | RCE via exposed JDWP debug agent in P4SearchPerforce · P4 (Helix Core) | Critical9.5 |
| CVE-2026-100103 | Authentication bypass via default auth token in P4SearchPerfoce · P4 (Helix Core) | Critical10.0 |
| CVE-2026-85979 | Command Injection in Puppet EnterprisePerforce Software · Puppet Enterprise | High8.6 |
| CVE-2026-89212 | XML External Entity in Akana API PlatformPerforce · Akana | Critical9.2 |
| CVE-2026-85978 | Unauthenticated Remote Code Execution in Akana API PlatformPerforce · Akana | Critical10.0 |
| CVE-2026-14254 | Improper Restriction of Excessive Authentication Attempts in Delphix Continuous DataPerforce · Delphix Continuous Data | High8.3 |
| CVE-2026-8804 | Cleartext Storage of Sensitive Information for Puppet Resource APIPerforce · Puppet Core | Medium6.7 |
| CVE-2026-6902 | Code Injection in Perforce P4 (Helix Core)Perforce · P4 (Helix Core) | High7.7 |
| CVE-2026-8654 | Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or…Delphix Continuous data · IBM Db2 Connector | High8.7 |
| CVE-2026-6043 | Insecure Default Configuration in P4 ServerPerforce · Helix Core Server (P4D) | High8.8 |
| CVE-2025-14591 | PII Leak Due to Change in EOR HandlingPerforce · Delphix Continuous Compliance | Medium5.3 |
| CVE-2025-13472 | Missing authorization in BlazeMeter Jenkins PluginPerforce · BlazeMeter | Medium5.3 |
| CVE-2025-10360 | Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5Perforce · Puppet Enterprise | Medium6.9 |
| CVE-2025-5459 | OS Command InjectionPerforce · Puppet Enterprise | High8.6 |
| CVE-2025-2903 | Privilege Chaining in DelphixPerforce · Delphix | High8.5 |
| CVE-2025-3113 | Improper Access Control in Delphix Masking EnginePerforce · Delphix | Critical9.0 |
| CVE-2024-11084 | Potential Username Enumeration in Helix ALMPerforce · Helix ALM | Medium6.3 |
| CVE-2025-1714 | Username Enumeration in GliffyPerforce · Gliffy | Medium6.9 |
| CVE-2024-5174 | Broken Authentication in GliffyGliffy · Gliffy Online | Medium5.3 |
| CVE-2024-7141 | CSRF in GliffyGliffy · Gliffy Online | Medium5.9 |
| CVE-2021-27017 | Deserialization of untrusted dataPuppetPu · Puppet Agent | Medium6.6 |
| CVE-2024-10315 | Insecure Configuration in Gliffy OnlineGliffy · Gliffy Online | Medium6.9 |
| CVE-2024-10314 | Unauthenticated Denial of Service via Auto Generation FunctionHelix · Helix Core | High8.7 |
| CVE-2024-10344 | Unauthenticated Denial of Service via Refuse FunctionHelix · Helix Core | High8.7 |
| CVE-2024-10345 | Unauthenticated Denial of Service via Shutdown FunctionHelix · Helix Core | High8.7 |
| CVE-2024-9129 | Format String Injection in Zend ServerZend · Zend Server | Critical9.3 |
| CVE-2024-9160 | Security Misconfiguration in Forge module PEADMPuppet · PEADM Forge Module | Medium5.4 |
| CVE-2024-8067 | Unicode "best fit" argument injectionHelix · Helix Core | Medium5.8 |
| CVE-2024-3930 | XML External Entity in AkanaAkana · Akana API Platform | Medium6.3 |
| CVE-2024-5250 | Overly Verbose Errors in SAML IntegrationAkana · Akana API Platform | Low3.5 |
| CVE-2024-5249 | SAML Replay in AkanaAkana · Akana API Platform | Medium5.4 |
| CVE-2024-6727 | Broken Access Control in DelphixDelphix · Data Control Tower (DCT) | Medium5.4 |
| CVE-2024-6726 | Remote Code Execution (RCE) in DelphixDelphix · Delphix Engine | High8.8 |
| CVE-2024-3826 | Broken SAML ValidationAkana · Akana API Platform | High8.6 |
| CVE-2024-3995 | Command Injection in Helix ALMPerforce · Helix ALM | Low2.0 |
| CVE-2024-2796 | SSRF in Akana API PlatformAkana · Akana API Platform | Critical9.3 |
| CVE-2024-3825 | CSRF in BlazeMeter Jenkins pluginBlazemeter · BlazeMeter Jenkins plugin | Medium4.3 |
| CVE-2024-0325 | Command Injection in Helix SyncHelix · Sync | Low3.6 |
| CVE-2023-5759 | Unauthenticated Remote Denial-of-Service via Buffer in Helix CoreHelix · Helix Core | High7.5 |
| CVE-2023-45319 | Unauthenticated Remote Denial-of-Service (Commit) in Helix CoreHelix · Helix Core | High7.5 |
| CVE-2023-45849 | Arbitrary Code Execution in Helix CoreHelix · Helix Core | Critical9.0 |