Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,102All CVEsplus 19,119 rejected
- 490Last 24 hours2,831 in the last 7 days
- 16,885Last 30 days1,551 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 1 | 0 | 1 | 18 |
| 2025 | 0 | 2 | 3 | 0 | 0 | 5 | 17 |
| 2024 | 0 | 0 | 5 | 0 | 0 | 5 | 12 |
| 2023 | 0 | 1 | 5 | 0 | 0 | 6 | 7 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-1966 | YugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UIYugabyteDB Inc · YugabyteDB Anywhere | Low2.4 |
| CVE-2025-8866 | YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint. An unauthenticated attacker could exploit…YugabyteDB Inc · YugabyteDB Anywhere | Medium5.1 |
| CVE-2025-8865 | The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs.…YugabyteDB Inc · YugabyteDB | Medium4.1 |
| CVE-2025-8864 | Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup logsYugabyteDB Inc · YugabyteDB Anywhere | Medium6.8 |
| CVE-2025-8863 | YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmissionYugabyteDB Inc · YugabyteDB | High7.0 |
| CVE-2025-8862 | YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we…YugabyteDB Inc · YugabyteDB | High7.0 |
| CVE-2024-11193 | An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext within application logs. This flaw…YugabyteDB · YugabyteDB Anywhere | Medium5.0 |
| CVE-2024-11165 | An information disclosure vulnerability exists in the backup configuration process where the SAS token is not masked in the configuration response. This…YugabyteDB · YugabyteDB Anywhere | Medium5.7 |
| CVE-2024-6908 | Admin Can Escalate Privileges to SuperAdmin Using Manual PUT RequestYugabyteDB · YugabyteDB Anywhere | Medium6.0 |
| CVE-2024-6895 | Insecure Account Profile ManagementYugabyteDB · YugabyteDB Anywhere | Medium6.1 |
| CVE-2024-0006 | DB User Password Leak in Application LogYugabyteDB · YugabyteDB Anywhere | Medium5.4 |
| CVE-2023-6002 | Log InjectionYugabyteDB · YugabyteDB | Medium6.5 |
| CVE-2023-6001 | Prometheus Metrics Accessible Pre-AuthenticationYugabyteDB · YugabyteDB Anywhere | Medium5.3 |
| CVE-2023-4640 | Set Logging Level Without AuthenticationYugabyteDB · Anywhere | Medium6.5 |
| CVE-2023-0575 | Remote Code ExecutionYugabyteDB · YugabyteDB | High7.2 |
| CVE-2023-0745 | Arbitrary File Write in High Availability Backup UploadYugabyteDB · YugabyteDB Anywhere | Medium6.7 |
| CVE-2023-0574 | Server-Side Request ForgeryYugabyteDB · YugabyteDB Anywhere | Medium6.8 |
| CVE-2022-37397 | The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active DirectoryYugaByte, Inc. · Yugabyte DB | High8.3 |