Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,644All CVEsplus 19,141 rejected
  • 674Last 24 hours2,957 in the last 7 days
  • 17,129Last 30 days1,607 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000014
202500000014
202431000414
202300000010
202210000110
20210020029
20202220067
20190100011

Latest CVEs

14 CVEs, newest first

CVEs, newest first
Title
CVE-2024-9301
A path traversal issue in E2Nest prior to commit 8a41948e553c89c56b14410c6ed395e9cfb9250aNetflix · E2Nest
High8.7
CVE-2024-7093
Server-Side Template Injection in Dispatch Message TemplatesNetflix · Dispatch
Critical9.4
CVE-2024-5023
Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCENetflix · ConsoleMe
Critical9.3
CVE-2024-4701
Path Traversal vulnerability via File Uploads in GenieNetflix · Genie
Critical9.9
CVE-2022-27177
A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2ConsoleMe
Critical9.8
CVE-2021-28099
In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide…Netflix OSS Hollow
Medium4.4
CVE-2021-28100
Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything…Netflix OSS Priam
Medium5.5
CVE-2020-9301
Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The…Netflix Spinnaker
High8.8
CVE-2020-9299
There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident…Netflix Dispatch
Medium5.4
CVE-2020-9300
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a…Netflix Dispatch
Medium6.5
CVE-2020-9298
The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of…Netflix Orca Spinnaker
High7.5
CVE-2020-9297
Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint…Netflix Titus
Critical9.8
CVE-2020-9296
Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of…Netflix Titus
Critical9.8
CVE-2019-10028
Denial of Service (DOS) in Dial Reference Source Code Used before June 18th, 2019.Netflix · Dial Reference Source Code Repo (https://github.com/Netflix/dial-reference)
High7.5