Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,172All CVEsplus 18,875 rejected
- 816Last 24 hours3,237 in the last 7 days
- 17,418Last 30 days1,565 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 235 | 568 | 411 | 39 | 27 | 1,280 | 3,037 |
| 2025 | 30 | 90 | 93 | 5 | 0 | 218 | 1,757 |
| 2024 | 55 | 99 | 99 | 8 | 0 | 261 | 1,539 |
| 2023 | 56 | 99 | 100 | 3 | 1 | 259 | 1,278 |
| 2022 | 57 | 91 | 72 | 2 | 0 | 222 | 1,019 |
| 2021 | 51 | 81 | 53 | 0 | 0 | 185 | 797 |
| 2020 | 46 | 48 | 52 | 2 | 0 | 148 | 612 |
| 2019 | 21 | 68 | 48 | 0 | 0 | 137 | 464 |
| 2018 | 26 | 70 | 67 | 3 | 0 | 166 | 327 |
| 2017 | 35 | 83 | 42 | 0 | 0 | 160 | 161 |
| 2016 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-114442 | Apache HertzBeat: incomplete XPath expression validation in aliasFieldsApache Software Foundation · Apache HertzBeat | Not scored |
| CVE-2026-119641 | Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownershipApache Software Foundation · Apache Oozie | Not scored |
| CVE-2026-119724 | Apache JClouds: XML External Entity (XXE) in provider-response parsingApache Software Foundation · Apache JClouds | Not scored |
| CVE-2026-111959 | Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds readsApache Software Foundation · Apache Arrow Rust | Not scored |
| CVE-2026-114364 | Apache Syncope: SQL injection via unsanitized opEvent in Audit Events searchApache Software Foundation · Apache Syncope | Not scored |
| CVE-2026-113687 | Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypassApache Software Foundation · Apache Syncope | Not scored |
| CVE-2026-113511 | Apache Syncope: Delegated administration boundaries can be bypassed for Realm updateApache Software Foundation · Apache Syncope | Not scored |
| CVE-2026-110535 | Apache Syncope: AuthProfile value escalation via self-service updateApache Software Foundation · Apache Syncope | Not scored |
| CVE-2026-109083 | Apache Syncope: Remote Code Execution via Flowable JUEL expressionApache Software Foundation · Apache Syncope | Not scored |
| CVE-2026-111089 | Apache Wicket: XSS via a resource bundle text written unescaped into generated JavaScript and markupApache Software Foundation · Apache Wicket | High7.6 |
| CVE-2026-95863 | Apache Wicket: XSS via a component id or markup id written unescaped into generated JavaScript and markupApache Software Foundation · Apache Wicket | High7.6 |
| CVE-2026-87718 | Apache Wicket: CSP headers silently omitted for pages served through nested request handler delegatesApache Software Foundation · Apache Wicket | Low2.3 |
| CVE-2026-84231 | Apache Wicket: XSS in ExternalLink via the model URL when the component is bound to a non-anchor tagApache Software Foundation · Apache Wicket | High7.4 |
| CVE-2026-84177 | Apache Wicket: A component's markup is served as a package resource when its class name contains an underscoreApache Software Foundation · Apache Wicket | Medium6.3 |
| CVE-2026-84172 | Apache Wicket: Component markup is served as a package resource when wicket-core has its own class loaderApache Software Foundation · Apache Wicket | Medium6.3 |
| CVE-2026-84170 | Apache Wicket: Configured upload limits are not enforced by the standalone file upload resourceApache Software Foundation · Apache Wicket | High8.3 |
| CVE-2026-83594 | Apache Wicket: FileUploadToResourceField accepts a client-asserted upload result and allocates the size it namesApache Software Foundation · Apache Wicket | High8.3 |
| CVE-2026-83559 | Apache Wicket: JavaScriptUtils#escapeQuotes does not escape the backslash, so its output can leave its string literalApache Software Foundation · Apache Wicket | High7.4 |
| CVE-2026-83539 | Apache Wicket: XSS in SmartLinkLabel and SmartLinkMultiLineLabel via a javascript: URL in the model dataApache Software Foundation · Apache Wicket | High7.4 |
| CVE-2026-82956 | Apache Wicket: XSS in AjaxNewWindowNotifyingBehavior via the client-supplied window nameApache Software Foundation · Apache Wicket | High7.6 |
| CVE-2026-82898 | Apache Wicket: A cross-origin listener invocation stopped by a login wall is replayed after the user signs inApache Software Foundation · Apache Wicket | Low2.1 |
| CVE-2026-82840 | Apache Wicket: The session id is renewed only on the first sign in, not on re-authenticationApache Software Foundation · Apache Wicket | High7.2 |
| CVE-2026-82705 | Apache Wicket: The configured authorization strategy is not applied to an IResource embedded in a componentApache Software Foundation · Apache Wicket | Medium6.3 |
| CVE-2026-82704 | Apache Wicket: A listener is invoked on a page instance the request itself created and never configuredApache Software Foundation · Apache Wicket | Medium6.9 |
| CVE-2026-82559 | Apache Wicket: WebSocket messages are processed against an HTTP session snapshot that survives invalidationApache Software Foundation · Apache Wicket | Low2.3 |
| CVE-2026-82558 | Apache Wicket: WebSocketBehavior delivers client messages to a component the client may not invokeApache Software Foundation · Apache Wicket | Low2.3 |
| CVE-2026-82557 | Apache Wicket: A disabled or invisible form submitting component is still invoked on a plain form submissionApache Software Foundation · Apache Wicket | Medium6.9 |
| CVE-2026-82115 | Apache Wicket: The configured authorization strategy is not applied to a shared WebSocketResourceApache Software Foundation · Apache Wicket | Medium6.3 |
| CVE-2026-120135 | Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by defaultApache Software Foundation · Apache Thrift | High8.2 |
| CVE-2026-118636 | Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoderApache Software Foundation · Apache MINA | Critical9.8 |
| CVE-2026-73322 | Apache Pinot: Incorrect authorization in the single-stage query engine allows reading unauthorized dimension tables via lookup()Apache Software Foundation · Apache Pinot | Not scored |
| CVE-2026-64618 | Apache Fineract: SQL injection vulnerability in Search APIApache Software Foundation · Apache Fineract | Critical9.8 |
| CVE-2026-65874 | Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpointsApache Software Foundation · Apache Fineract | High8.8 |
| CVE-2026-71569 | Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host NameApache Software Foundation · Apache Camel | Medium4.8 |
| CVE-2026-115942 | Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow readApache Software Foundation · Apache Qpid Proton C | Not scored |
| CVE-2026-114230 | Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL framesApache Software Foundation · Apache Qpid Proton C | Not scored |
| CVE-2026-105042 | Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crashApache Software Foundation · Apache Qpid Proton C | Not scored |
| CVE-2026-105031 | Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.Apache Software Foundation · Apache Qpid Proton C | Not scored |
| CVE-2026-114349 | Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batchesApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-112375 | Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigsApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-116593 | Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpointApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-115644 | Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST ExtensionsApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-111551 | Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocationApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-111496 | Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuationApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-111115 | Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsingApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-111108 | Apache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readersApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-111073 | Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of serviceApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-110985 | Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configuredApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-110952 | Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by defaultApache Software Foundation · Apache Kafka | Not scored |
| CVE-2026-83525 | Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.Apache Software Foundation · Apache Kafka | Not scored |