Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,160All CVEsplus 19,120 rejected
- 489Last 24 hours2,790 in the last 7 days
- 16,891Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 1 | 0 | 0 | 1 | 35 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 34 |
| 2024 | 1 | 1 | 2 | 0 | 0 | 4 | 34 |
| 2023 | 7 | 21 | 2 | 0 | 0 | 30 | 30 |
| Title | ||
|---|---|---|
| CVE-2026-9539 | libslirp TCP URG OOB Read Information Leakfreedesktop.org · libslirp | Medium6.5 |
| CVE-2024-7009 | Calibre SQL InjectionCalibre · Calibre | Medium4.2 |
| CVE-2024-7008 | Calibre Reflected Cross-Site Scripting (XSS)Calibre · Calibre | Medium5.4 |
| CVE-2024-6782 | Calibre Remote Code ExecutionCalibre · Calibre | Critical9.8 |
| CVE-2024-6781 | Calibre Arbitrary File ReadCalibre · Calibre | High7.5 |
| CVE-2023-4225 | Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo · Chamilo | High8.8 |
| CVE-2023-4226 | Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo · Chamilo | High8.8 |
| CVE-2023-4224 | Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo · Chamilo | High8.8 |
| CVE-2023-4223 | Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo · Chamilo | High8.8 |
| CVE-2023-4222 | Chamilo LMS Learning Path PPT2LP Command Injection VulnerabilityChamilo · Chamilo | High7.2 |
| CVE-2023-4221 | Chamilo LMS Learning Path PPT2LP Command Injection VulnerabilityChamilo · Chamilo | High7.2 |
| CVE-2023-4220 | Chamilo LMS Unauthenticated Big Upload File Remote Code ExecutionChamilo · Chamilo | High8.1 |
| CVE-2023-3545 | Chamilo LMS Htaccess File Upload Security BypassChamilo · Chamilo | Critical9.8 |
| CVE-2023-3533 | Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File WriteChamilo · Chamilo | Critical9.8 |
| CVE-2023-3368 | Chamilo LMS Unauthenticated Command InjectionChamilo · Chamilo | Critical9.8 |
| CVE-2023-1720 | Bitrix24 Stored Cross-Site Scripting (XSS) via File UploadBitrix24 · Bitrix24 | Critical9.6 |
| CVE-2023-1719 | Bitrix24 Insecure Global Variable ExtractionBitrix24 · Bitrix24 | High7.5 |
| CVE-2023-1718 | Bitrix24 Denial-of-Service (DoS) via Improper File Stream AccessBitrix24 · Bitrix24 | High7.5 |
| CVE-2023-1717 | Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype PollutionBitrix24 · Bitrix24 | Critical9.6 |
| CVE-2023-1716 | Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)Bitrix24 · Bitrix24 | Critical9.0 |
| CVE-2023-1715 | Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)Bitrix24 · Bitrix24 | Critical9.0 |
| CVE-2023-1714 | Bitrix24 Remote Command Execution (RCE) via Unsafe Variable ExtractionBitrix24 · Bitrix24 | High8.8 |
| CVE-2023-1713 | Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File CreationBitrix24 · Bitrix24 | High8.8 |
| CVE-2023-4198 | Dolibarr ERP CRM (<= 17.0.3) Improper Access ControlDolibarr · Dolibarr ERP CRM | Medium6.5 |
| CVE-2023-4197 | Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCEDolibarr · Dolibarr ERP CRM | High7.5 |
| CVE-2023-30591 | NodeBB Pre-Authentication Denial-of-ServiceNodeBB, Inc. · NodeBB | High7.5 |
| CVE-2023-2315 | Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2Opencart · Opencart | High8.1 |
| CVE-2023-2971 | Typora Local File DisclosureTypora · Typora | Medium6.3 |
| CVE-2023-2318 | MarkText DOM-Based Cross-site Scripting leading to Remote Code ExecutionMarkText · MarkText | High8.6 |
| CVE-2023-2317 | Typora DOM-Based Cross-site Scripting leading to Remote Code ExecutionTypora · Typora | High8.6 |
| CVE-2023-2316 | Typora Local File DisclosureTypora · Typora | High7.4 |
| CVE-2023-2110 | Obsidian Local File DisclosureObsidian · Obsidian | High8.2 |
| CVE-2023-3514 | RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege VulnerabilityRazer · Razer Central | High7.8 |
| CVE-2023-3513 | RazerCentralService Unsafe Deserialization Escalation of PrivilegeRazer · Razer Central | High7.8 |
| CVE-2023-2017 | Improper Control of Generation of Code in Twig Rendered Views in ShopwareShopware AG · Shopware 6 | High8.8 |