Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 399,660All CVEsplus 18,865 rejected
- 525Last 24 hours2,961 in the last 7 days
- 17,025Last 30 days1,508 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 3 | 1 | 0 | 0 | 5 | 504 |
| 2025 | 0 | 4 | 2 | 1 | 0 | 7 | 499 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 492 |
| 2023 | 0 | 3 | 0 | 0 | 0 | 3 | 491 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 488 |
| 2021 | 1 | 1 | 2 | 0 | 0 | 4 | 488 |
| 2020 | 5 | 17 | 5 | 0 | 0 | 27 | 484 |
| 2019 | 1 | 8 | 0 | 0 | 0 | 9 | 457 |
| 2018 | 0 | 9 | 16 | 0 | 0 | 25 | 448 |
| 2017 | 4 | 4 | 0 | 0 | 0 | 8 | 423 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 | 415 |
| 2015 | 0 | 0 | 0 | 0 | 0 | 0 | 415 |
| 2014 | 0 | 25 | 30 | 2 | 0 | 57 | 415 |
| 2013 | 0 | 11 | 28 | 1 | 0 | 40 | 358 |
| 2012 | 0 | 10 | 15 | 0 | 0 | 25 | 318 |
| 2011 | 0 | 22 | 8 | 0 | 0 | 30 | 293 |
| 2010 | 0 | 47 | 23 | 7 | 0 | 77 | 263 |
| 2009 | 0 | 40 | 5 | 0 | 0 | 45 | 186 |
| 2008 | 1 | 33 | 20 | 1 | 0 | 55 | 141 |
| 2007 | 0 | 29 | 18 | 0 | 0 | 47 | 86 |
| 2006 | 0 | 14 | 23 | 2 | 0 | 39 | 39 |
| Title | ||
|---|---|---|
| CVE-2023-7357 | FlexNet Publisher lmadmin Rogue Vendor Daemon VulnerabilityRevera · FlexNet Publisher | High8.6 |
| CVE-2026-4869 | Potential Privilege Escalation in InstallShieldFlexera · InstallShield | Medium5.4 |
| CVE-2026-19572 | FlexNet Publisher lmadmin SOAP Authentication Bypass VulnerabilityFlexera · FlexNet Publisher | Critical9.3 |
| CVE-2026-4027 | FlexNet Manager Suite Attachment File DisclosureFlexera · FlexNet Manager Suite | High7.1 |
| CVE-2026-4026 | FlexNet Manager Suite Privilege Escalation VulnerabilityFlexera · FlexNet Manager Suite | High8.7 |
| CVE-2025-12418 | Potential Denial of Service in Supported Versions of Revenera InstallShieldRevenera · InstallShield | Medium5.6 |
| CVE-2024-14012 | Potential Privilege Escalation in Revenera InstallShield 2023 R1Revenera · InstallShield | High7.3 |
| CVE-2024-7562 | A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured.…Revenera · InstallShield | High7.3 |
| CVE-2021-41528 | Improper authorization related to Import / Export interfaces on RISC PlatformFlexera · RISC Platform | Medium5.3 |
| CVE-2021-41527 | 2FA bypass on the RISC PlatformFlexera · RISC Platform | Low2.3 |
| CVE-2023-29080 | Privilege escalation in InstallShieldRevenera · InstallShield | High8.5 |
| CVE-2024-2658 | Local privilege escalation in FlexNet PublisherFlexera · FlexNet Publisher | High8.5 |
| CVE-2023-29081 | InstallShield Symlink Vulnerability Affecting Suite Project SetupsRevenera · InstallShield | Medium5.5 |
| CVE-2021-41526 | A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when… | High7.8 |
| CVE-2019-8963 | A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based… | High7.5 |
| CVE-2017-6894 | A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the… | High7.8 |
| CVE-2021-41525 | An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon… | Medium5.5 |
| CVE-2020-12083 | An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64). | Critical9.9 |
| CVE-2020-12082 | A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64). | Medium5.4 |
| CVE-2020-12080 | A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause… | High7.5 |
| CVE-2020-12081 | An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system… | High7.5 |
| CVE-2019-8961 | A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Because the message reading… | High7.5 |
| CVE-2019-8960 | A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading… | High7.5 |
| CVE-2013-3494 | A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external libraries. which could let a…UMPlayer · UMPlayer | High7.8 |
| CVE-2013-3942 | Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution VulnerabilityDaum · Potplayer | High7.8 |
| CVE-2013-3489 | Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm fileMedia Player Classic · Media Player Classic - Home Cinema (MPC-HC) | High7.8 |
| CVE-2013-3488 | Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted…Media Player Classic · Media Player Classic - Home Cinema (MPC-HC) | High7.8 |
| CVE-2013-0739 | Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.Chamilo · Chamilo | Medium6.1 |
| CVE-2013-0738 | Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.Chamilo · Chamilo | Medium6.1 |
| CVE-2013-0725 | ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilitiesERDAS · ER Viewer | High7.8 |
| CVE-2013-3486 | IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow VulnerabilityIrfanView FlashPix PlugIn · IrfanView FlashPix PlugIn | Critical9.6 |
| CVE-2013-3493 | XnView 2.03 has an integer overflow vulnerabilityXnView · XnView | Critical9.8 |
| CVE-2013-3492 | XnView 2.03 has a stack-based buffer overflow vulnerabilityXnView · XnView | Critical9.8 |
| CVE-2012-4919 | Gallery Plugin1.4 for WordPress has a Remote File Include VulnerabilityGallery Plugin authors · Gallery | Critical9.8 |
| CVE-2013-0737 | Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames…BoltWire · BoltWire | Medium6.1 |
| CVE-2013-3246 | Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file.XnView · XnView | High7.8 |
| CVE-2013-3247 | Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF…XnView · XnView | High7.8 |
| CVE-2013-3932 | SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager"…Jomres · Jomres component for Joomla! | High8.8 |
| CVE-2013-3931 | Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business…Jomres · Jomres component for Joomla! | Medium5.4 |
| CVE-2013-3937 | Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.XnView · XnView | High7.8 |
| CVE-2013-3939 | xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary…XnView · XnView | High7.8 |
| CVE-2013-3941 | Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory…XnView · XnView | Critical9.8 |
| CVE-2013-3944 | Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.IrfanView · MrSID plugin | High7.8 |
| CVE-2013-3945 | The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.IrfanView · MrSID plugin | High7.8 |
| CVE-2013-3946 | Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header.IrfanView · MrSID plugin | High7.8 |
| CVE-2013-3935 | Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication…Opsview · Opsview | High8.8 |
| CVE-2013-3936 | Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web…Opsview · Opsview | Medium6.1 |
| CVE-2019-8956 | In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL…UNKNOWN · Linux Kernel | High7.8 |
| CVE-2018-20034 | A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier…Flexera Software LLC · FlexNet Publisher | High7.5 |
| CVE-2018-20032 | A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a…Flexera Software LLC · FlexNet Publisher | High7.5 |