Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,156All CVEsplus 19,119 rejected
- 491Last 24 hours2,790 in the last 7 days
- 16,896Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 1 | 0 | 0 | 2 | 12 |
| 2025 | 0 | 2 | 1 | 0 | 0 | 3 | 10 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 7 |
| 2023 | 0 | 3 | 1 | 0 | 0 | 4 | 7 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 3 |
| 2021 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-92088 | Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects…upKeeper Solutions · upKeeper Instant Privilege Access | High8.6 |
| CVE-2026-21689 | iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cppInternationalColorConsortium · iccDEV | Medium6.5 |
| CVE-2025-20314 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical…Cisco · Cisco IOS XE Software | Medium6.7 |
| CVE-2025-40775 | DNS message with invalid TSIG causes an assertion failureISC · BIND 9 | High7.5 |
| CVE-2025-20192 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a…Cisco · Cisco IOS XE Software | High7.7 |
| CVE-2023-39915 | Crashes on parsing certain invalid RPKI objectsNLnet Labs · Routinator | High7.5 |
| CVE-2023-39914 | BER/CER/DER decoder panics on invalid inputNLnet Labs · bcder | High7.5 |
| CVE-2023-36848 | Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packetJuniper Networks · Junos OS | Medium6.5 |
| CVE-2023-2968 | Undefined variable usage in npm package "proxy" leads to remote denial of serviceproxy | High7.5 |
| CVE-2022-22213 | Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP updateJuniper Networks · Junos OS | Medium5.9 |
| CVE-2021-3718 | A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in…Lenovo · ThinkPad BIOS | Medium4.3 |
| CVE-2021-34705 | Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass VulnerabilityCisco · Cisco IOS | Medium5.3 |