Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,288All CVEsplus 19,140 rejected
  • 453Last 24 hours2,729 in the last 7 days
  • 16,934Last 30 days1,558 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000039
202501000139
2024064001038
202315200828
20220134001720
20210100013
20200020022

Latest CVEs

39 CVEs, newest first

CVEs, newest first
Title
CVE-2025-31344
The giflib open-source component has a buffer overflow vulnerabilityopenEuler · giflib
High7.3
CVE-2024-24898
Information Leakage in kernelopenEuler · kernel
Medium6.0
CVE-2024-24891
Information Leakage in kernelopenEuler · kernel
Medium6.0
CVE-2024-24892
Unauthorized RCE in migration-toolsopenEuler · migration-tools
High8.1
CVE-2024-24899
Command injection in aops-zeusopenEuler · aops-zeus
High7.2
CVE-2024-24897
Remote command execution in A-Tune-CollectoropenEuler · A-Tune-Collector
High8.1
CVE-2024-24890
Command injection in ioprobe of gala-gopheropenEuler · gala-gopher
High7.8
CVE-2021-33632
TOCTOU Race Condition problem in iSuladopenEuler · iSulad
High7.0
CVE-2021-33633
Command Injection in aops-ceresopenEuler · aops-ceres
High7.3
CVE-2021-33631
Kernel crash in EXT4 filesystemopenEuler · kernel
Medium5.5
CVE-2021-33630
NULL-ptr-deref in network schedopenEuler · kernel
Medium5.5
CVE-2021-33638
Run copy with container in a malicious directory may cause container escapingopenEuler · iSulad
High8.4
CVE-2021-33637
Export container in a malicious directory may cause process to be hijackedopenEuler · iSulad
High8.4
CVE-2021-33636
Load malicious images may cause process to be hijackedopenEuler · iSulad
High8.4
CVE-2021-33635
Pull malicious images may cause process to be hijackedopenEuler · iSulad
Critical9.8
CVE-2021-33634
Malicious image running containers may cause DoS attacksopenEuler · lcr
Medium6.3
CVE-2021-33639
REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified.kernel
High7.5
CVE-2021-33642
When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function.byacc
Medium5.5
CVE-2021-33641
When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).byacc
High7.8
CVE-2021-33640
After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t:…openEuler · openEuler 22.03 LTS
Medium6.2
CVE-2021-33646
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.libtar
High7.5
CVE-2021-33645
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.libtar
High7.5
CVE-2021-33644
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname,…libtar
High8.1
CVE-2021-33643
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink,…libtar
Medium6.5
CVE-2021-33655
When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.kernel
Medium6.7
CVE-2021-33656
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.openEuler:kernel
Medium6.8
CVE-2021-33654
When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 exception.openEuler:mindspore
High7.5
CVE-2021-33653
When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter block_shape element, it will cause a…openEuler:mindspore
High7.5
CVE-2021-33650
When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data outside of bounds…openEuler:mindspore
High7.5
CVE-2021-33651
When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it will cause a division by 0 exception.openEuler:mindspore
High7.5
CVE-2021-33652
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it will cause a division by 0 exception.openEuler:mindspore
High7.5
CVE-2021-33649
When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the…openEuler:mindspore
High7.5
CVE-2021-33647
When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap…openEuler:mindspore
High7.5
CVE-2021-33648
When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it…openEuler:mindspore
High7.5
CVE-2021-33657
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker…SDL2
High8.8
CVE-2021-33658
atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any…openEuler · atune
High7.8
CVE-2021-33629
isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when…
High7.5
CVE-2020-15437
The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows…linux kernel
Medium4.4
CVE-2020-15436
Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging…linux kernel
Medium6.7