Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,957All CVEsplus 19,141 rejected
- 221Last 24 hours3,185 in the last 7 days
- 16,911Last 30 days1,564 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 4 | 1 | 0 | 0 | 8 | 64 |
| 2025 | 2 | 11 | 1 | 1 | 0 | 15 | 56 |
| 2024 | 12 | 13 | 2 | 0 | 0 | 27 | 41 |
| 2023 | 5 | 5 | 3 | 0 | 0 | 13 | 14 |
| 2022 | 0 | 0 | 0 | 1 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-66152 | A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.SonicWall · NetExtender | High8.8 |
| CVE-2026-10732 | All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive containing two…decompress | Medium6.1 |
| CVE-2026-24217 | NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this…NVIDIA · BioNeMo Framework | High8.8 |
| CVE-2026-5627 | Path Traversal in mintplex-labs/anything-llmmintplex-labs · mintplex-labs/anything-llm | Critical9.1 |
| CVE-2025-15036 | Path Traversal Vulnerability in mlflow/mlflowPublic exploitmlflow · mlflow/mlflow | Critical9.6 |
| CVE-2026-30828 | Wallos: SSRF via url parameter leading to File Traversalellite · Wallos | High8.7 |
| CVE-2025-66608 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send…Yokogawa Electric Corporation · FAST/TOOLS | High8.7 |
| CVE-2024-2356 | Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Critical9.6 |
| CVE-2025-12790 | Rubygem-mqtt: rubygem-mqtt hostname validationNicholas J Humfrey · ruby-mqtt | High7.4 |
| CVE-2025-58291 | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.Huawei · HarmonyOS | Low3.3 |
| CVE-2025-50185 | DbGate allows Unauthorized File Access via CSV PluginPublic exploitdbgate · dbgate | High7.0 |
| CVE-2025-50184 | DbGate allows for File Traversal via file parameterdbgate · dbgate | High7.1 |
| CVE-2025-6209 | Arbitrary File Read through Path Traversal in run-llama/llama_indexPublic exploitrun-llama · run-llama/llama_index | High7.5 |
| CVE-2024-8248 | Path Traversal in mintplex-labs/anything-llmPublic exploitmintplex-labs · mintplex-labs/anything-llm | High7.2 |
| CVE-2024-10648 | Path Traversal in gradio-app/gradioPublic exploitgradio-app · gradio-app/gradio | High8.2 |
| CVE-2024-8537 | Path Traversal in modelscope/agentscopePublic exploitmodelscope · modelscope/agentscope | Critical9.1 |
| CVE-2024-12389 | Path Traversal in binary-husky/gpt_academicPublic exploitbinary-husky · binary-husky/gpt_academic | High8.8 |
| CVE-2024-8982 | Local File Inclusion in bentoml/openllmPublic exploitbentoml · bentoml/openllm | Medium6.2 |
| CVE-2024-7957 | Arbitrary File Overwrite in danswer-ai/danswerPublic exploitdanswer-ai · danswer-ai/danswer | Critical9.1 |
| CVE-2024-8859 | Path Traversal in mlflow/mlflowPublic exploitmlflow · mlflow/mlflow | High7.5 |
| CVE-2024-11170 | Path Traversal in danny-avila/librechatPublic exploitdanny-avila · danny-avila/librechat | High8.8 |
| CVE-2024-13059 | Path Traversal in mintplex-labs/anything-llmPublic exploitmintplex-labs · mintplex-labs/anything-llm | High7.2 |
| CVE-2024-51534 | Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged could potentially…Dell · PowerProtect DD | High7.1 |
| CVE-2024-21542 | Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path…luigi | High7.7 |
| CVE-2024-7774 | Path Traversal in langchain-ai/langchainjsPublic exploitlangchain-ai · langchain-ai/langchainjs | Medium6.5 |
| CVE-2024-7962 | Arbitrary File Read via Insufficient Validation in gaizhenbiao/chuanhuchatgptPublic exploitgaizhenbiao · gaizhenbiao/chuanhuchatgpt | High7.5 |
| CVE-2024-6394 | Local File Inclusion in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.5 |
| CVE-2024-6396 | Arbitrary File Overwrite and Data Exfiltration in aimhubio/aimPublic exploitaimhubio · aimhubio/aim | Critical9.8 |
| CVE-2024-5926 | Path Traversal in stitionai/devikaPublic exploitstitionai · stitionai/devika | Critical9.1 |
| CVE-2024-6139 | Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | High7.3 |
| CVE-2024-4841 | Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Medium4.0 |
| CVE-2024-5443 | Remote Code Execution via Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Critical9.8 |
| CVE-2024-21518 | This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to improper sanitization…Public exploitopencart/opencart | High7.2 |
| CVE-2024-5211 | Path Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llmmintplex-labs · mintplex-labs/anything-llm | Critical9.1 |
| CVE-2024-2360 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Critical9.8 |
| CVE-2024-3429 | Path Traversal in parisneo/lollmsPublic exploitparisneo · parisneo/lollms | Critical9.8 |
| CVE-2024-2928 | Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflowmlflow · mlflow/mlflow | High7.5 |
| CVE-2024-4320 | Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Critical9.8 |
| CVE-2024-2624 | Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Critical9.4 |
| CVE-2024-2914 | TarSlip Vulnerability in deepjavalibrary/djlPublic exploitdeepjavalibrary · deepjavalibrary/djl | High7.8 |
| CVE-2024-2178 | Path Traversal Vulnerability in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.5 |
| CVE-2024-2361 | Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Critical9.6 |
| CVE-2024-3435 | Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High8.4 |
| CVE-2024-3848 | Path Traversal Bypass in mlflow/mlflowPublic exploitmlflow · mlflow/mlflow | High7.5 |
| CVE-2024-4322 | Path Traversal in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | High7.5 |
| CVE-2024-2358 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webuiPublic exploitparisneo · parisneo/lollms-webui | Critical9.8 |
| CVE-2024-34470 | An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path Traversal vulnerability exists in the /public/loader.php file.…Public exploit | High8.6 |
| CVE-2024-1561 | Arbitrary Local File Read via Component Method Invocation in gradio-app/gradioPublic exploitgradio-app · gradio-app/gradio | High7.5 |
| CVE-2024-2083 | Directory Traversal in zenml-io/zenmlPublic exploitzenml-io · zenml-io/zenml | Critical9.9 |
| CVE-2024-3573 | Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflowPublic exploitmlflow · mlflow/mlflow | Critical9.3 |