Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,040All CVEsplus 18,873 rejected
- 732Last 24 hours3,248 in the last 7 days
- 17,396Last 30 days1,557 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 28 | 107 | 79 | 2 | 2 | 218 | 404 |
| 2025 | 2 | 12 | 29 | 6 | 0 | 49 | 186 |
| 2024 | 1 | 7 | 11 | 3 | 0 | 22 | 137 |
| 2023 | 0 | 5 | 7 | 1 | 0 | 13 | 115 |
| 2022 | 1 | 4 | 4 | 1 | 0 | 10 | 102 |
| 2021 | 6 | 11 | 14 | 2 | 0 | 33 | 92 |
| 2020 | 3 | 5 | 2 | 0 | 0 | 10 | 59 |
| 2019 | 5 | 16 | 10 | 0 | 0 | 31 | 49 |
| 2018 | 4 | 8 | 4 | 0 | 0 | 16 | 18 |
| 2017 | 1 | 0 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-118487 | Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParserEclipse Foundation · Eclipse Vert.x | High7.5 |
| CVE-2026-118488 | Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis clientEclipse Foundation · Eclipse Vert.x | Medium5.9 |
| CVE-2026-118489 | CachingWebClient shares user-specific HTTP responses across users via the shared cache tierEclipse Foundation · Eclipse Vert.x | High7.5 |
| CVE-2026-89295 | Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameterEclipse Foundation · Eclipse Mnestix | Not scored |
| CVE-2026-89293 | Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tamperingEclipse Foundation · Eclipse Mnestix | High8.8 |
| CVE-2026-89292 | Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured InfrastructuresEclipse Foundation · Eclipse Mnestix | Critical9.2 |
| CVE-2026-92610 | Improper limitation of paths in py-aspect-model-loaderEclipse Foundation · Eclipse Semantic Modeling Framework (ESMF) | Not scored |
| CVE-2026-113421 | ThreadX Modules invokes trace-full callbacks after module unloadEclipse Foundation · Eclipse ThreadX | High7.3 |
| CVE-2026-115231 | User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilegeEclipse Foundation · Eclipse ThreadX | High8.5 |
| CVE-2026-115215 | NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session poolEclipse Foundation · Eclipse ThreadX | High8.7 |
| CVE-2026-115403 | NULL pointer dereference in the BSD raw IPv6 send path when the destination table is fullEclipse Foundation · Eclipse ThreadX | High8.2 |
| CVE-2026-115654 | User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not ownEclipse Foundation · Eclipse ThreadX | Medium6.9 |
| CVE-2026-115653 | Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged modeEclipse Foundation · Eclipse ThreadX | High7.0 |
| CVE-2026-114408 | NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is fullEclipse Foundation · Eclipse ThreadX | High8.7 |
| CVE-2026-118052 | Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operationEclipse Foundation · Eclipse ThreadX | Medium6.8 |
| CVE-2026-114278 | Unauthenticated Command Injection via kubeconfig Username in che-machine-execEclipse Foundation · Eclipse Che | Critical9.8 |
| CVE-2026-115408 | ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secretsEclipse Foundation · Eclipse KeyPont | Medium5.5 |
| CVE-2026-113644 | iofogctl command injection via Controller provisioning responseEclipse Foundation · Eclipse ioFog | Medium5.5 |
| CVE-2026-115216 | Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentialsEclipse Foundation · Eclipse ioFog | Critical9.1 |
| CVE-2026-89320 | HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrityEclipse Foundation · Eclipse KeyPont - GOSE | High8.8 |
| CVE-2026-89319 | JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocationEclipse Foundation · Eclipse KeyPont - GOSE | Medium6.3 |
| CVE-2026-89318 | JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)Eclipse Foundation · Eclipse KeyPont - GOSE | Medium6.9 |
| CVE-2026-89317 | JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)Eclipse Foundation · Eclipse KeyPont - GOSE | Medium6.3 |
| CVE-2026-89316 | LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertionEclipse Foundation · Eclipse KeyPont - GOSE | Medium6.3 |
| CVE-2026-89315 | JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffixEclipse Foundation · Eclipse KeyPont - GOSE | Medium6.9 |
| CVE-2026-89314 | Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 sEclipse Foundation · Eclipse KeyPont - GOSE | Medium6.9 |
| CVE-2026-89313 | JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nilEclipse Foundation · Eclipse KeyPont - GOSE | Medium6.3 |
| CVE-2026-89312 | AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IVEclipse Foundation · Eclipse KeyPont - GOSE | Medium6.9 |
| CVE-2026-110938 | JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsingEclipse Foundation · Eclipse OpenJ9 | High8.7 |
| CVE-2026-111075 | JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserializationEclipse Foundation · Eclipse OpenJ9 | High8.7 |
| CVE-2026-111074 | JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()Eclipse Foundation · Eclipse OpenJ9 | High8.7 |
| CVE-2026-93003 | NetX Duo Web HTTP server interprets request body content as HTTP header fieldsEclipse Foundation · Eclipse ThreadX - NetX Duo | Medium6.9 |
| CVE-2026-95107 | Module object allocation size overflow corrupts the manager object poolEclipse Foundation · Eclipse ThreadX | High7.0 |
| CVE-2026-94202 | Module block-pool create validates two of the four parameter words it readsEclipse Foundation · Eclipse ThreadX | Medium4.8 |
| CVE-2026-95108 | Deleting a user-mode module thread leaks its privileged kernel stackEclipse Foundation · Eclipse ThreadX | Medium6.8 |
| CVE-2026-94024 | Module Manager object lookup validates one byte of a module's search nameEclipse Foundation · Eclipse ThreadX | Medium6.9 |
| CVE-2026-94023 | Module delete dispatchers do not enforce kernel-object ownership before irreversible deletionEclipse Foundation · Eclipse ThreadX | Medium6.9 |
| CVE-2026-95109 | Cortex-A7 module data validation checks only the first address of a caller-supplied rangeEclipse Foundation · Eclipse ThreadX | High8.5 |
| CVE-2026-94192 | Module object deallocation can free a live ThreadX kernel objectEclipse Foundation · Eclipse ThreadX | High8.5 |
| CVE-2026-92843 | Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX SecureEclipse Foundation · Eclipse ThreadX - NetX Duo | High8.7 |
| CVE-2026-92853 | Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX SecureEclipse Foundation · Eclipse ThreadX - NetX Duo | High8.7 |
| CVE-2026-94018 | NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow pathEclipse Foundation · Eclipse ThreadX - NetX Duo | High8.8 |
| CVE-2026-93475 | Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509Eclipse Foundation · Eclipse ThreadX - NetX Duo | Critical9.3 |
| CVE-2026-91057 | Out-of-bounds read when a multi-line text view string ends with a carriage returnEclipse Foundation · Eclipse ThreadX - GUIX | Medium4.6 |
| CVE-2026-92454 | JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decodeEclipse Foundation · Eclipse ThreadX - GUIX | Medium6.8 |
| CVE-2026-91059 | JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation sizeEclipse Foundation · Eclipse ThreadX - GUIX | Medium6.8 |
| CVE-2026-91189 | GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or themeEclipse Foundation · Eclipse ThreadX - GUIX | High7.1 |
| CVE-2026-92446 | GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loaderEclipse Foundation · Eclipse ThreadX - GUIX | Medium6.8 |
| CVE-2026-92449 | Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arenaEclipse Foundation · Eclipse ThreadX - GUIX | Medium6.8 |
| CVE-2026-91186 | PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds writeEclipse Foundation · Eclipse ThreadX - GUIX | High8.4 |