Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,027All CVEsplus 19,141 rejected
- 262Last 24 hours3,249 in the last 7 days
- 16,943Last 30 days1,571 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 1 | 3 | 0 | 0 | 6 | 10 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 4 |
| 2022 | 1 | 0 | 0 | 0 | 0 | 1 | 3 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 2 |
| 2020 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-120457 | libaec through 1.1.7 Out-of-Bounds Read via m_se_decode() Second Extension DecoderPublic exploitDeutsches Klimarechenzentrum · libaec | Medium5.8 |
| CVE-2026-106567 | ImageMagick: Infinite Loop in PSD decoder on 32-bit buildsImageMagick · ImageMagick | Medium5.9 |
| CVE-2026-93019 | Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_readPublic exploitImager | Critical9.1 |
| CVE-2026-58317 | Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to…TeraTerm Project · TTSSH2 | Medium5.1 |
| CVE-2026-14454 | Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signedTONYC · Imager | Critical9.8 |
| CVE-2026-34155 | RAUC: Improper Signing of Plain Bundles Exceeding 2 GiBrauc · rauc | High7.2 |
| CVE-2023-0185 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may…NVIDIA · vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) | Medium6.7 |
| CVE-2022-36025 | Incorrect Conversion between Numeric Types in Besu Ethereum Clienthyperledger · besu | Critical9.1 |
| CVE-2020-13545 | An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A…Softmaker | High8.8 |
| CVE-2020-7067 | OOB Read in urldecode()PHP Group · PHP | High7.5 |