Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 401,097All CVEsplus 19,119 rejected
- 495Last 24 hours2,830 in the last 7 days
- 16,880Last 30 days1,551 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 6 | 1 | 0 | 0 | 7 | 64 |
| 2025 | 1 | 0 | 1 | 0 | 0 | 2 | 57 |
| 2024 | 0 | 5 | 0 | 0 | 0 | 5 | 55 |
| 2023 | 11 | 18 | 5 | 0 | 0 | 34 | 50 |
| 2022 | 5 | 7 | 4 | 0 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2026-15928 | XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.XMLRPC-C · XMLRPC-C | High8.2 |
| CVE-2026-57871 | Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. This issue affects…MicroRealEstate · MicroRealEstate | High7.1 |
| CVE-2026-57870 | Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without…MicroRealEstate · MicroRealEstate | Medium5.3 |
| CVE-2026-57869 | Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents…MicroRealEstate · MicroRealEstate | High7.1 |
| CVE-2026-57868 | MicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: through 1.0.0-alpha3.MicroRealEstate · MicroRealEstate | High7.1 |
| CVE-2026-57867 | MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate…MicroRealEstate · MicroRealEstate | High8.8 |
| CVE-2025-5591 | Stored Cross-site Scripting (XSS) in Kentico Xperience 13Kentico · Kentico Xperience | High7.7 |
| CVE-2024-12223 | Stored Cross-site Scripting (XSS) in Nutanix Prism CentralNutanix · Prism Central | Critical9.3 |
| CVE-2025-2394 | Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile ApplicationsEcovacs · Ecovacs Mobile and Android Application | Medium4.7 |
| CVE-2024-28097 | Stored Cross-site Scripting in Calendar functionality in SchoolboxSchoolbox Pty Ltd · Schoolbox | High7.3 |
| CVE-2024-28096 | Stored Cross-site Scripting in Class functionality in SchoolboxSchoolbox Pty Ltd · Schoolbox | High7.3 |
| CVE-2024-28095 | Stored Cross-site Scripting in News functionality in SchoolboxSchoolbox Pty Ltd · Schoolbox | High7.3 |
| CVE-2024-28094 | Blind SQL Injection in Chat functionality in SchoolboxSchoolbox Pty Ltd · Schoolbox | High8.8 |
| CVE-2023-6451 | Publicly Known Cryptographic Machine Key In Procura Portal ApplicationAlayaCare · Procura Portal | High8.6 |
| CVE-2023-4393 | HTML and SMTP Injection in LiquidFilesLiquidFiles Pty Ltd · LiquidFiles | Medium5.4 |
| CVE-2023-1356 | Reflected Cross-site Scripting In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-27262 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-27260 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-27261 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Medium5.3 |
| CVE-2023-27377 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-27376 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-27375 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-27259 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-27258 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-27257 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-27256 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Medium5.8 |
| CVE-2023-27255 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-27254 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-26584 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-26583 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-26582 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-26581 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-26580 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-26579 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Medium5.3 |
| CVE-2023-26578 | Arbitrary File Upload to Web Root In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High8.8 |
| CVE-2023-26577 | Stored Cross-site Scripting In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-26576 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-26575 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-26574 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-26573 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High8.2 |
| CVE-2023-26572 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-26571 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-26570 | Missing Authentication In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | High7.5 |
| CVE-2023-26569 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-26568 | Unauthenticated SQL Injection In IDAttend’s IDWeb ApplicationIDAttend Pty Ltd · IDWeb | Critical9.8 |
| CVE-2023-22858 | Stored cross-site scripting in BlogEngine.NET version 3.3.8.0BlogEngine.NET · BlogEngine.NET | Medium5.3 |
| CVE-2023-22857 | Stored cross-site scripting in BlogEngine.NET version 3.3.8.0BlogEngine.NET · BlogEngine.NET | High8.5 |
| CVE-2023-22856 | Stored cross-site scripting in BlogEngine.NET version 3.3.8.0BlogEngine.NET · BlogEngine.NET | High8.5 |
| CVE-2022-39018 | Broken access controls on PDFtron data in M-Files HubshareM-Files · Hubshare | High8.2 |
| CVE-2022-39019 | Broken access controls on PDFtron WebviewerUI in M-Files HubshareM-Files · Hubshare | Medium6.3 |