Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,892All CVEsplus 19,117 rejected
- 451Last 24 hours2,944 in the last 7 days
- 16,835Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 34 |
| 2025 | 0 | 2 | 0 | 0 | 0 | 2 | 34 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 32 |
| 2023 | 0 | 8 | 7 | 0 | 0 | 15 | 32 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 17 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 17 |
| 2020 | 1 | 5 | 7 | 0 | 0 | 13 | 17 |
| 2019 | 0 | 2 | 2 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2024-36259 | Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information…Odoo · Odoo Community | High7.5 |
| CVE-2024-12368 | Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other…Odoo · Odoo Community | High8.1 |
| CVE-2021-23203 | Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF…Odoo · Odoo Community | High7.5 |
| CVE-2021-44547 | A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege…Odoo · Odoo Community | High8.7 |
| CVE-2021-26947 | Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script…Odoo · Odoo Community | Medium6.5 |
| CVE-2021-26263 | Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject…Odoo · Odoo Community | High7.5 |
| CVE-2021-44465 | Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future…Odoo · Odoo Community | Medium5.3 |
| CVE-2021-44775 | Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject…Odoo · Odoo Community | Medium6.5 |
| CVE-2021-23178 | Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized…Odoo · Odoo Community | High7.5 |
| CVE-2021-23186 | A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database…Odoo · Odoo Community | High8.7 |
| CVE-2021-23166 | A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on…Odoo · Odoo Community | High8.7 |
| CVE-2021-44461 | Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of…Odoo · Odoo Enterprise | Medium6.5 |
| CVE-2021-44460 | Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system…Odoo · Odoo Community | High7.4 |
| CVE-2021-44476 | A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the…Odoo · Odoo Community | Medium6.8 |
| CVE-2021-45111 | Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of…Odoo · Odoo Community | High7.1 |
| CVE-2021-23176 | Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote…Odoo · Odoo Community | Medium6.5 |
| CVE-2021-45071 | Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script…Odoo · Odoo Community | Medium5.3 |
| CVE-2020-29396 | A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote…Odoo · Odoo Community | Critical9.9 |
| CVE-2019-11786 | Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms,…Odoo · Odoo Community | Medium4.3 |
| CVE-2019-11785 | Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users…Odoo · Odoo Community | Medium6.5 |
| CVE-2019-11784 | Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated…Odoo · Odoo Community | Medium6.5 |
| CVE-2019-11783 | Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated…Odoo · Odoo Community | Medium6.5 |
| CVE-2019-11782 | Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact…Odoo · Odoo Community | Medium6.5 |
| CVE-2019-11781 | Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims…Odoo · Odoo Community | Medium6.5 |
| CVE-2018-15645 | Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create…Odoo · Odoo Community | High8.1 |
| CVE-2018-15641 | Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal…Odoo · Odoo Community | Medium6.3 |
| CVE-2018-15638 | Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject…Odoo · Odoo Community | High7.1 |
| CVE-2018-15634 | Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote attackers to…Odoo · Odoo Community | High7.1 |
| CVE-2018-15633 | Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to…Odoo · Odoo Community | High7.1 |
| CVE-2018-15632 | Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to…Odoo · Odoo Community | High8.2 |
| CVE-2019-11780 | Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to…Odoo · Odoo Community | High8.1 |
| CVE-2018-15640 | Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a…Odoo · Odoo Enterprise | High8.1 |
| CVE-2018-15635 | Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to…Odoo · Odoo Community | Medium5.9 |
| CVE-2018-15631 | Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to…Odoo · Odoo Community | Medium6.5 |