Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 399,677All CVEsplus 18,867 rejected
- 405Last 24 hours2,968 in the last 7 days
- 17,043Last 30 days1,515 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 69 | 92 | 52 | 1 | 13 | 227 | 3,184 |
| 2025 | 11 | 23 | 13 | 0 | 0 | 47 | 2,957 |
| 2024 | 6 | 6 | 12 | 0 | 0 | 24 | 2,910 |
| 2023 | 15 | 13 | 9 | 0 | 0 | 37 | 2,886 |
| 2022 | 0 | 15 | 11 | 0 | 0 | 26 | 2,849 |
| 2021 | 3 | 4 | 2 | 0 | 0 | 9 | 2,823 |
| 2020 | 4 | 22 | 24 | 3 | 0 | 53 | 2,814 |
| 2019 | 10 | 22 | 10 | 1 | 0 | 43 | 2,761 |
| 2018 | 32 | 53 | 23 | 2 | 0 | 110 | 2,718 |
| 2017 | 46 | 86 | 64 | 4 | 0 | 200 | 2,608 |
| 2016 | 43 | 64 | 17 | 0 | 0 | 124 | 2,408 |
| 2015 | 10 | 55 | 86 | 3 | 0 | 154 | 2,284 |
| 2014 | 0 | 58 | 1,467 | 11 | 0 | 1,536 | 2,130 |
| 2013 | 0 | 54 | 54 | 3 | 0 | 111 | 594 |
| 2012 | 1 | 98 | 120 | 12 | 0 | 231 | 483 |
| 2011 | 0 | 22 | 35 | 1 | 0 | 58 | 252 |
| 2010 | 1 | 11 | 14 | 1 | 0 | 27 | 194 |
| 2009 | 0 | 20 | 12 | 0 | 0 | 32 | 167 |
| 2008 | 1 | 36 | 9 | 1 | 0 | 47 | 135 |
| 2007 | 0 | 37 | 18 | 0 | 0 | 55 | 88 |
| 2006 | 0 | 13 | 6 | 2 | 0 | 21 | 33 |
| 2005 | 0 | 6 | 6 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-121578 | CVE-2026-121578Amidaware · Tactical RMM | Medium6.1 |
| CVE-2026-16305 | CVE-2026-16305INFINITT Healthcare · System Manager | Not scored |
| CVE-2026-120656 | CVE-2026-120656OpenKruise · kruise-manager | Not scored |
| CVE-2026-120630 | CVE-2026-120630CrewAI · CrewAI | Not scored |
| CVE-2026-120627 | CVE-2026-120627Private Internet Access · Firefox extension | Not scored |
| CVE-2026-120596 | CVE-2026-120596Ethernut / egnite GmbH · Nut/Net TCP/IP Stack | High7.5 |
| CVE-2026-16306 | CVE-2026-16306INFINITT Healthcare · System Manager | Not scored |
| CVE-2026-118238 | CVE-2026-118238Tenda · W18E | High7.2 |
| CVE-2026-118171 | CVE-2026-118171Strapi · Strapi Open Source and Enterprise Headless CMS | Not scored |
| CVE-2026-118172 | CVE-2026-118172Strapi · Strapi Open Source and Enterprise Headless CMS | Not scored |
| CVE-2026-118170 | CVE-2026-118170Strapi · Strapi Open Source and Enterprise Headless CMS | Not scored |
| CVE-2026-118132 | CVE-2026-118132NextChat · NextChat | Not scored |
| CVE-2026-118131 | CVE-2026-118131GnuPG · GnuPG | Not scored |
| CVE-2026-115533 | CVE-2026-115533Hugging Face · LeRobot | Not scored |
| CVE-2026-116596 | CVE-2026-116596Pyrus · Pyrus Sync | Not scored |
| CVE-2026-111590 | SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal servicesHarbor · Harbor | Not scored |
| CVE-2026-82987 | CVE-2026-82987Viewsonic · vCast | High7.5 |
| CVE-2026-114463 | CVE-2026-114463Nous Research · Hermes Agent | High7.5 |
| CVE-2026-107692 | War Thunder Account ImpersonationGaijin Entertainment · War Thunder | Medium4.8 |
| CVE-2026-97406 | Authentication Bypass via Bearer Tokens to Unauthorized Credential MintingXerj · Console API | Critical9.1 |
| CVE-2026-110746 | CVE-2026-110746TotalSecurity · TotalAV | High7.8 |
| CVE-2026-110005 | Moghtech Komodo contains an OS command injection vulnerabilityKomodo · Komodo | High8.8 |
| CVE-2026-16753 | CVE-2026-16753Lowcoder · Lowcoder | High8.8 |
| CVE-2026-104937 | CVE-2026-104937Shopware · Shopware | High8.1 |
| CVE-2026-84286 | OOB Read/Write via Negative Array Index in exllamav3_ext Kernel TableTurboderp-org · ExLlamaV3 | Critical9.8 |
| CVE-2026-107248 | CVE-2026-107248Thelia · Thelia | High8.8 |
| CVE-2026-103537 | CVE-2026-103537Thelia · Thelia | Medium5.4 |
| CVE-2026-103535 | CVE-2026-103535Thelia · Thelia | High8.8 |
| CVE-2026-103529 | CVE-2026-103529Thelia · Thelia | Medium5.4 |
| CVE-2026-103528 | CVE-2026-103528Thelia · Thelia | Medium5.4 |
| CVE-2026-103527 | CVE-2026-103527Thelia · Thelia | Medium6.1 |
| CVE-2026-103526 | CVE-2026-103526Thelia · Thelia | Low3.7 |
| CVE-2026-103524 | CVE-2026-103524Thelia · Thelia | Medium4.8 |
| CVE-2026-103523 | CVE-2026-103523Thelia · Thelia | Medium6.1 |
| CVE-2026-103522 | CVE-2026-103522Thelia · Thelia | High7.2 |
| CVE-2026-103521 | CVE-2026-103521Thelia · Thelia | High7.2 |
| CVE-2026-107709 | Bower decompress-zip has a path traversal vulnerabilityBower Decompress-Zip · decompress-zip | High7.8 |
| CVE-2026-93034 | CVE-2026-93034SGLang · SGLang | Critical9.8 |
| CVE-2026-107202 | CVE-2026-107202jonssonyan · h-ui | Critical9.1 |
| CVE-2026-106550 | CVE-2026-106550Mozilla · Node-convict | High7.5 |
| CVE-2026-106511 | CVE-2026-106511MultiversX Labs S.R.L. · multisig-improved | Critical9.8 |
| CVE-2026-82988 | CVE-2026-82988Viewsonic · vCast | High7.5 |
| CVE-2026-82989 | CVE-2026-82989Viewsonic · vCast | Critical9.8 |
| CVE-2026-104056 | CVE-2026-104056Authlib · Authlib | Critical9.8 |
| CVE-2026-96760 | Authlib library contains a signature‑verification bypass vulnerabilityAuthlib · Authlib | Critical9.8 |
| CVE-2026-18311 | CVE-2026-18311Readwise · Reader | Medium6.1 |
| CVE-2026-18320 | CVE-2026-18320Readwise · Reader | Medium6.1 |
| CVE-2026-18312 | CVE-2026-18312Readwise · Reader | Medium6.1 |
| CVE-2026-75907 | CVE-2026-75907Norwegian Cruise Line · door access control | High7.5 |
| CVE-2026-82356 | Imprivata EAM: Unrotatable X.509 RSA Key Pair in ProductionImprivata · Imprivata Enterprise Access Management | High7.5 |