Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 443Last 24 hours2,721 in the last 7 days
- 16,927Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 872 | 1,466 | 1,209 | 215 | 8 | 3,770 | 115,575 |
| 2025 | 989 | 1,706 | 2,301 | 203 | 2 | 5,201 | 111,805 |
| 2024 | 1,348 | 2,226 | 2,236 | 92 | 8 | 5,910 | 106,604 |
| 2023 | 1,680 | 2,304 | 2,209 | 44 | 0 | 6,237 | 100,694 |
| 2022 | 2,244 | 2,889 | 2,448 | 31 | 0 | 7,612 | 94,457 |
| 2021 | 1,362 | 2,376 | 2,663 | 72 | 0 | 6,473 | 86,845 |
| 2020 | 1,441 | 2,683 | 2,992 | 105 | 0 | 7,221 | 80,372 |
| 2019 | 1,464 | 2,836 | 3,297 | 133 | 0 | 7,730 | 73,151 |
| 2018 | 1,283 | 3,110 | 2,866 | 31 | 0 | 7,290 | 65,421 |
| 2017 | 1,263 | 2,742 | 2,570 | 36 | 0 | 6,611 | 58,131 |
| 2016 | 259 | 644 | 716 | 28 | 0 | 1,647 | 51,520 |
| 2015 | 15 | 589 | 1,214 | 213 | 0 | 2,031 | 49,873 |
| 2014 | 4 | 696 | 1,728 | 227 | 0 | 2,655 | 47,842 |
| 2013 | 3 | 393 | 727 | 111 | 0 | 1,234 | 45,187 |
| 2012 | 7 | 645 | 1,331 | 124 | 0 | 2,107 | 43,953 |
| 2011 | 0 | 848 | 1,141 | 97 | 0 | 2,086 | 41,846 |
| 2010 | 20 | 1,226 | 1,434 | 151 | 0 | 2,831 | 39,760 |
| 2009 | 10 | 2,289 | 2,446 | 154 | 0 | 4,899 | 36,929 |
| 2008 | 11 | 2,477 | 2,390 | 160 | 0 | 5,038 | 32,030 |
| 2007 | 22 | 3,228 | 3,254 | 226 | 0 | 6,730 | 26,992 |
| 2006 | 11 | 2,593 | 3,254 | 497 | 0 | 6,355 | 20,262 |
| 2005 | 23 | 2,446 | 3,318 | 515 | 0 | 6,302 | 13,907 |
| 2004 | 6 | 829 | 630 | 147 | 0 | 1,612 | 7,605 |
| 2003 | 11 | 638 | 501 | 73 | 0 | 1,223 | 5,993 |
| 2002 | 8 | 862 | 705 | 115 | 0 | 1,690 | 4,770 |
| 2001 | 6 | 594 | 578 | 145 | 0 | 1,323 | 3,080 |
| 2000 | 2 | 715 | 564 | 156 | 0 | 1,437 | 1,757 |
| 1999 | 3 | 172 | 121 | 24 | 0 | 320 | 320 |
| Title | ||
|---|---|---|
| CVE-2026-123973 | SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissions to use the ZIP import…SharePoint Products · CopyMove for SharePoint V6 | Medium5.0 |
| CVE-2026-123962 | In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys file to be a…Debian · FreedomBox | High8.4 |
| CVE-2026-123158 | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to…OpenBSD · OpenSSH | High8.1 |
| CVE-2026-107891 | musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation…musl -libc · musl | High8.1 |
| CVE-2026-123033 | Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their respective fixes)…iXsystems · TrueNAS SCALE | High8.3 |
| CVE-2026-123029 | Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza…Wowza · Streaming Engine | High7.5 |
| CVE-2026-123025 | An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The…OPNsense · os-acme-client | Critical9.4 |
| CVE-2026-123017 | GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grant_gold(1000000) call can be forged.godotsteam · GodotSteam | Medium6.5 |
| CVE-2026-123014 | iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands with the…iTerm2 · iTerm2 | High8.7 |
| CVE-2026-123012 | In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a different…Gogs · Gogs | High7.1 |
| CVE-2026-123011 | STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.STMicroelectronics · st-mems-android-linux-sensors-hal | Medium4.2 |
| CVE-2026-123010 | @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There…twilio-labs · netlify-okta-auth | High7.2 |
| CVE-2026-122992 | In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.G4KLX · DStarGateway | Critical9.2 |
| CVE-2026-106716 | ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the… | Not scored |
| CVE-2026-106715 | NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page… | Not scored |
| CVE-2026-106714 | Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it in a Hybrid WebView. An… | Not scored |
| CVE-2026-106713 | An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the com.dramawave.feature.web.WebPageActivity… | Not scored |
| CVE-2026-122148 | In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass vulnerability. An attacker with administrator…Yealink · MeetingBoard Pro | High8.2 |
| CVE-2026-122124 | On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data…Yealink · UVC40 E2 | Medium6.1 |
| CVE-2026-122120 | In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers…Yealink · Plug-in Softwares | Critical9.0 |
| CVE-2026-122118 | In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used.…Yealink · AVHub | High7.4 |
| CVE-2026-122116 | Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function.…Yealink · T3XW Series Phones | Medium4.3 |
| CVE-2026-122006 | The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g.,…rubyonrails · Active Storage | Critical9.8 |
| CVE-2026-121802 | @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a…better-auth · Better Auth | Critical9.1 |
| CVE-2026-39431 | On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This… | High7.2 |
| CVE-2026-39430 | On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls are not enforced… | Critical9.8 |
| CVE-2026-106991 | hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered user can delete, lock, or sticky any forum thread (including admins'… | High7.1 |
| CVE-2026-38601 | A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypass OpenID Connect authentication and… | Not scored |
| CVE-2026-38600 | A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted… | Critical9.8 |
| CVE-2026-38595 | An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync… | Critical9.8 |
| CVE-2026-117127 | Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php | High7.5 |
| CVE-2026-117082 | An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU device allows an… | Not scored |
| CVE-2026-117069 | An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of… | High7.5 |
| CVE-2026-117068 | An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of… | High7.5 |
| CVE-2026-117067 | An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to… | Not scored |
| CVE-2026-106808 | OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Generate Authentication Data endpoint. The… | High7.5 |
| CVE-2026-106807 | A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is… | Not scored |
| CVE-2026-106806 | A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and… | High7.5 |
| CVE-2026-106805 | A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session… | High7.5 |
| CVE-2026-106804 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() function copies the attacker-controlled… | High7.5 |
| CVE-2026-106803 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/reginfo+xml NOTIFY… | Critical9.8 |
| CVE-2025-62819 | Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration Authority) User… | Medium6.5 |
| CVE-2026-115642 | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted…OpenStack · keystonemiddleware | High8.3 |
| CVE-2026-117350 | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. | Medium6.5 |
| CVE-2026-117349 | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. | Medium5.3 |
| CVE-2026-117346 | Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit | High7.5 |
| CVE-2026-117184 | An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the GraphQL endpoint | High7.5 |
| CVE-2026-117183 | A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read… | High7.5 |
| CVE-2026-117182 | An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to execute arbitrary web… | Medium5.4 |
| CVE-2026-117028 | Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated… | Medium6.5 |