Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,739All CVEsplus 19,141 rejected
- 660Last 24 hours3,039 in the last 7 days
- 17,185Last 30 days1,610 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 3 | 0 | 0 | 9 | 19 |
| 2025 | 1 | 1 | 2 | 0 | 0 | 4 | 10 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 6 |
| 2021 | 1 | 2 | 0 | 0 | 0 | 3 | 5 |
| 2020 | 0 | 1 | 0 | 0 | 0 | 1 | 2 |
| 2019 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-96770 | s2s-proxy accepts untrusted client certificatesTemporal Technologies, Inc. · s2s-proxy | Critical9.3 |
| CVE-2026-73542 | Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data…SEIKO EPSON CORPORATION · Multiple SEIKO EPSON printers and scanners | Medium6.3 |
| CVE-2026-24066 | Slate Digital Connect macOS XPC certificate validation privilege escalationSlate Digital LLC · Slate Digital Connect | High8.4 |
| CVE-2026-42789 | Non-CA certificate accepted as intermediate issuer in public_key path validationErlang · OTP | High7.0 |
| CVE-2026-44852 | Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management InterfaceHewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating System (AOS) | High7.2 |
| CVE-2025-10539 | Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking AppDeskTime · DeskTime Time Tracking App | Medium4.8 |
| CVE-2026-33779 | Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communicationJuniper Networks · Junos OS | High8.3 |
| CVE-2026-27134 | Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autenticationstrimzi · strimzi-kafka-operator | High8.1 |
| CVE-2026-27133 | Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clustersstrimzi · strimzi-kafka-operator | Medium5.9 |
| CVE-2025-48057 | Icinga 2 certificate renewal might incorrectly renew an invalid certificateIcinga · icinga2 | Critical9.3 |
| CVE-2025-22459 | Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to…Ivanti · Endpoint Manager | Medium4.8 |
| CVE-2024-43196 | IBM OpenPages data manipulationIBM · OpenPages with Watson | Medium4.3 |
| CVE-2025-1146 | CrowdStrike Falcon Sensor for Linux TLS IssueCrowdStrike · Falcon sensor for Linux | High8.1 |
| CVE-2021-44532 | Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer…NodeJS · Node | Medium5.3 |
| CVE-2021-23162 | Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This…Gallagher · Command Centre Mobile Connect for Android | High7.7 |
| CVE-2021-23155 | Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This…Gallagher · Command Centre Mobile Client for Android | Critical9.0 |
| CVE-2021-1566 | Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation VulnerabilityCisco · Cisco Web Security Appliance (WSA) | High7.4 |
| CVE-2019-3762 | Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated…Dell · Data Protection Central | High7.5 |
| CVE-2019-3890 | It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential…The Gnome Project · evolution-ews | High8.1 |