Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,060All CVEsplus 19,119 rejected
- 493Last 24 hours2,912 in the last 7 days
- 16,873Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 8 | 1 | 0 | 0 | 12 | 15 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 3 |
| 2024 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-6881 | Authenticated SQL Injection Enables Unauthorized Access to Sensitive Information in Ellucian Advance Web and Legacy AdvanceEllucian · Advance Web | Critical9.4 |
| CVE-2026-13381 | VSee Clinic and API Insecure Direct Object Reference in File API Allows Unauthorized File Access and DeletionVSee · Clinic | High8.7 |
| CVE-2026-13380 | VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP ResponsesVSee · Clinic | Critical9.0 |
| CVE-2026-9588 | Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web PortalSangoma · Switchvox SMB Edition | High7.0 |
| CVE-2026-9587 | Authenticated Local File Inclusion (LFI) in Switchvox SMB Web PortalSangoma · Switchvox SMB Edition | High7.1 |
| CVE-2026-9586 | Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMBExploitedSangoma · Switchvox SMB Edition | Critical9.3 |
| CVE-2026-9585 | Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web PortalSangoma · Switchvox SMB Edition | High8.6 |
| CVE-2025-58744 | Hard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector CaptureMilner · ImageDirector Capture | Medium6.9 |
| CVE-2025-58743 | Insecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector CaptureMilner · ImageDirector Capture | High7.2 |
| CVE-2025-58742 | Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector CaptureMilner · ImageDirector Capture | High8.5 |
| CVE-2025-58741 | Insecure Masked Credential Fields Enable Database Credential Access in Milner ImageDirector CaptureMilner · ImageDirector Capture | High8.5 |
| CVE-2025-58740 | Hardcoded Encryption Key Enables Database Credential Access in Milner ImageDirector CaptureMilner · ImageDirector Capture | High8.5 |
| CVE-2025-12874 | HTTP Request Smuggling in Quest Coexistence Manager for NotesQuest · Coexistence Manager for Notes | Medium6.3 |
| CVE-2023-6260 | Web UI OS Command Injection in Brivo ACS100, ACS300Brivo · ACS100, ACS300 | High7.4 |
| CVE-2023-6259 | Local Access to Sensitive Data in Brivo ACS100 and ACS300Brivo · ACS100, ACS300 | High7.1 |