Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,959All CVEsplus 19,118 rejected
- 394Last 24 hours2,829 in the last 7 days
- 16,813Last 30 days1,548 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 25 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 25 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 25 |
| 2023 | 1 | 7 | 15 | 2 | 0 | 25 | 25 |
| Title | ||
|---|---|---|
| CVE-2023-31209 | Command injection via active checks and REST APICheckmk GmbH · Checkmk | High8.8 |
| CVE-2023-23548 | XSS in business intelligenceCheckmk GmbH · Checkmk | Medium5.4 |
| CVE-2023-22359 | User-enumeration in RestAPITribe29 · Checkmk | Medium4.3 |
| CVE-2023-22348 | Reading host_configs does not honour contact groupsCheckmk GmbH · Checkmk | Medium4.3 |
| CVE-2023-31208 | Livestatus command injection in RestAPICheckmk GmbH · Checkmk | High8.3 |
| CVE-2023-22318 | Denial of service against webconfTribe29 · Checkmk Appliance | High7.5 |
| CVE-2023-31207 | Automation user secret logged to Apache access logTribe29 · Checkmk | Medium4.4 |
| CVE-2022-46302 | Remote Code Execution with Root Privileges via Broad Apache PermissionsTribe29 · Checkmk | High8.8 |
| CVE-2023-22309 | Reflected Cross Site Scripting (XSS)Tribe29 · Checkmk Appliance | Medium6.1 |
| CVE-2023-22294 | Privilege escalation in Checkmk ApplianceTribe29 · Checkmk Appliance | High8.8 |
| CVE-2023-22307 | Site-Passwords in GET parametersTribe29 · Checkmk Appliance | Medium5.5 |
| CVE-2023-2020 | Unauthorized scheduling of downtimes via REST APITribe29 · Checkmk | Medium4.3 |
| CVE-2023-1768 | Symmetric agent data encryption fails silentlyTribe29 · Checkmk | Low3.7 |
| CVE-2023-22288 | Email HTML InjectionTribe29 · Checkmk | Medium6.8 |
| CVE-2022-48320 | CSRF in add-visual endpointTribe29 · Checkmk | Medium5.4 |
| CVE-2022-48319 | Host secret disclosed in Checkmk logsTribe29 · Checkmk | Medium6.5 |
| CVE-2022-48318 | Insecure access control mechanisms for RestAPI documentationTribe29 · Checkmk | Medium5.3 |
| CVE-2022-48317 | Insecure Termination of RestAPI Session TokensTribe29 · Checkmk | Medium5.6 |
| CVE-2022-48321 | SSRF in agent-receiver APITribe29 · Checkmk | Medium6.8 |
| CVE-2022-47909 | LQL Injection in Livestatus HTTP headersTribe29 · Checkmk | Medium6.8 |
| CVE-2022-46836 | PHP code injection in watolibTribe29 · Checkmk | Critical9.1 |
| CVE-2022-46303 | Command injection in SMS notificationsTribe29 · Checkmk | High8.0 |
| CVE-2022-43440 | Privilege escalation via manipulated unixcat executableTribe29 · Checkmk | High8.8 |
| CVE-2023-0284 | Improper validation of LDAP user IDsTribe29 · Checkmk | Medium6.8 |
| CVE-2022-4884 | Path-Traversal in MKP storingTribe29 · Checkmk | Low3.5 |