Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,959All CVEsplus 19,141 rejected
- 209Last 24 hours3,185 in the last 7 days
- 16,897Last 30 days1,563 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 9 | 4 | 0 | 0 | 0 | 13 | 49 |
| 2025 | 9 | 3 | 3 | 0 | 0 | 15 | 36 |
| 2024 | 9 | 4 | 0 | 0 | 0 | 13 | 21 |
| 2023 | 4 | 1 | 2 | 0 | 0 | 7 | 8 |
| 2022 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-96440 | Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）Flowring Technology Corp · Agentflow 4.0 | High7.1 |
| CVE-2026-96431 | Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous TypeFlowring Technology Corp · Agentflow 4.0 | Critical9.3 |
| CVE-2026-96430 | Flowring Agentflow 4.0 - Exposed Dangerous Method or FunctionFlowring Technology Corp · Agentflow 4.0 | High8.7 |
| CVE-2026-96429 | Flowring Agentflow 4.0 - SQL InjectionFlowring Technology Corp · Agentflow 4.0 | Critical9.3 |
| CVE-2026-96428 | Flowring Agentflow 4.0 - SQL InjectionFlowring Technology Corp · Agentflow 4.0 | Critical9.3 |
| CVE-2026-76159 | Duplicati for Windows - Incorrect Permission Assignment for Critical ResourceDuplicati · Duplicati | High7.0 |
| CVE-2026-76158 | Datiphy Data Management Center - External Control of File Name or PathDatiphy Inc. · Data Management Center | Critical9.3 |
| CVE-2026-76157 | Datiphy Data Management Center - Missing Authentication for Critical FunctionDatiphy Inc. · Data Management Center | High8.8 |
| CVE-2026-76156 | Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS CommandDatiphy Inc. · Data Management Center | Critical9.4 |
| CVE-2026-76155 | Datiphy Data Management Center - Use of Default CredentialsDatiphy Inc. · Data Management Center | Critical9.3 |
| CVE-2026-24727 | SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co., Ltd. · Corporate Training Management System | Critical9.3 |
| CVE-2026-24729 | Interinfo DreamMaker - Unrestricted Upload of File with Dangerous TypeInternet Information Co., Ltd · DreamMaker | Critical10.0 |
| CVE-2026-24728 | Interinfo DreamMaker - Missing Authentication for Critical FunctionInternet Information Co., Ltd · DreamMaker | Critical9.3 |
| CVE-2025-31342 | Galaxy Software Services Vitals ESP Forum Module - Unrestricted Upload of File with Dangerous TypeGalaxy Software Services Corporation · Vitals ESP | Critical9.3 |
| CVE-2025-54946 | SUNNET Corporate Training Management System - SQL InjectionSUNNET Technology Co., Ltd. · Corporate Training Management System | Critical9.3 |
| CVE-2025-54945 | SUNNET Corporate Training Management System - External Control of File Name or PathSUNNET Technology Co., Ltd. · Corporate Training Management System | Critical10.0 |
| CVE-2025-54944 | SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co., Ltd. · Corporate Training Management System | Medium6.9 |
| CVE-2025-54943 | SUNNET Corporate Training Management System - Missing AuthorizationSUNNET Technology Co., Ltd. · Corporate Training Management System | Critical9.3 |
| CVE-2025-54942 | SUNNET Corporate Training Management System - Missing Authentication for Critical FunctionSUNNET Technology Co., Ltd. · Corporate Training Management System | Critical9.3 |
| CVE-2025-48784 | Soar Cloud HRD Human Resource Management System - Missing AuthorizationSoar Cloud System CO., LTD. · HRD Human Resource Management System | High8.8 |
| CVE-2025-48783 | Soar Cloud HRD Human Resource Management System - External Control of File Name or PathSoar Cloud System CO., LTD. · HRD Human Resource Management System | High8.8 |
| CVE-2025-48782 | Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous TypeSoar Cloud System CO., LTD. · HRD Human Resource Management System | Critical9.9 |
| CVE-2025-48781 | Soar Cloud HRD Human Resource Management System - External Control of File Name or PathSoar Cloud System CO., LTD. · HRD Human Resource Management System | High8.7 |
| CVE-2025-48780 | Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted DataSoar Cloud System CO., LTD. · HRD Human Resource Management System | Critical9.9 |
| CVE-2025-5192 | Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical FunctionSoar Cloud System CO., LTD. · HRD Human Resource Management System | Critical9.3 |
| CVE-2025-31338 | Wisdom Master Pro - Missing AuthorizationSUNNET Technology Co., Ltd. · Wisdom Master Pro | Medium6.9 |
| CVE-2025-31339 | Wisdom Master Pro - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co., Ltd. · Wisdom Master Pro | Medium5.3 |
| CVE-2025-31340 | Wisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP ProgramSUNNET Technology Co., Ltd. · Wisdom Master Pro | Critical9.9 |
| CVE-2024-12652 | Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')Intumit · SmartRobot′s Conversational AI Platform | Critical9.3 |
| CVE-2024-11984 | SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co., Ltd. · Corporate Training Management System | Critical9.4 |
| CVE-2024-52959 | iota C.ai Conversational Platform - Improper Control of Generation of Code ('Code Injection')Galaxy Software Services Corporation · iota C.ai Conversational Platform | Critical9.3 |
| CVE-2024-52958 | iota C.ai Conversational Platform - Improper Verification of Cryptographic SignatureGalaxy Software Services Corporation · iota C.ai Conversational Platform | Critical9.3 |
| CVE-2024-43776 | Huachu Easytest Online Learning Test Platform - SQL InjectionHuachu Digital Technology Ltd. · Easytest Online Test Platform | High8.7 |
| CVE-2024-43775 | Huachu Easytest Online Learning Test Platform - SQL InjectionHuachu Digital Technology Ltd. · Easytest Online Test Platform | High8.7 |
| CVE-2024-43774 | Huachu Easytest Online Learning Test Platform - SQL InjectionHuachu Digital Technology Ltd. · Easytest Online Test Platform | High8.7 |
| CVE-2024-43773 | Huachu Easytest Online Learning Test Platform - SQL InjectionHuachu Digital Technology Ltd. · Easytest Online Test Platform | Critical9.3 |
| CVE-2024-43772 | Huachu Easytest Online Learning Test Platform - SQL InjectionHuachu Digital Technology Ltd. · Easytest Online Test Platform | Critical9.3 |
| CVE-2024-7871 | Huachu Easytest Online Learning Test Platform - SQL InjectionHuachu Digital Technology Ltd. · Easytest Online Test Platform | High8.7 |
| CVE-2024-6118 | Hamastar MeetingHub Paperless Meetings - Plaintext Storage of a PasswordHamastar Technology · MeetingHub Paperless Meetings | Critical9.3 |
| CVE-2024-6117 | Hamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous TypeHamastar Technology · MeetingHub Paperless Meetings | Critical9.3 |
| CVE-2024-5262 | ProjectDiscovery Interactsh - Files or Directories Accessible to External PartiesProjectDiscovery · Interactsh | Critical9.3 |
| CVE-2023-34210 | SQL Injection in EasyUse MailHunter UltimateEasyUse Digital Technology · MailHunter Ultimate | High7.7 |
| CVE-2023-34209 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter UltimateEasyUse Digital Technology · MailHunter Ultimate | Medium5.0 |
| CVE-2023-34208 | Path Traversal in EasyUse MailHunter UltimateEasyUse Digital Technology · MailHunter Ultimate | Medium6.5 |
| CVE-2023-34207 | Unrestricted Upload of File with Dangerous Type in EasyUse MailHunter UltimateEasyUse Digital Technology · MailHunter Ultimate | Critical9.9 |
| CVE-2023-25133 | Improper privilege management vulnerability in CyberPower PowerPanel BusinessCyberPower · PowerPanel Business Local / Remote | Critical9.1 |
| CVE-2023-25132 | Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel BusinessCyberPower · PowerPanel Business Local / Remote | Critical9.1 |
| CVE-2023-25131 | Use of default password vulnerability in CyberPower PowerPanel BusinessCyberPower · PowerPanel Business Local / Remote | Critical9.4 |
| CVE-2022-45796 | SHARP Multifunction Printer - Command InjectionSHARP · SHARP multifunction printers | Critical9.1 |