Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,957All CVEsplus 19,141 rejected
- 220Last 24 hours3,184 in the last 7 days
- 16,908Last 30 days1,564 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 1 | 0 | 0 | 5 | 16 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 11 |
| 2024 | 1 | 7 | 3 | 0 | 0 | 11 | 11 |
| Title | ||
|---|---|---|
| CVE-2026-94346 | PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release…Dell · PowerProtect Data Domain Virtual Edition | High7.2 |
| CVE-2026-108120 | path traversal inKoozali - SME Serverkoozali · SME Server | High7.7 |
| CVE-2026-104810 | Mitel MiVoice Office 400 File Management File Browser path traversal vulnerabilityMitel · Mitel MiVoice Office 400 | High8.4 |
| CVE-2026-104806 | Mitel MiVoice Office 400 System Logs Path Traversal Information DisclosureMitel · Mitel MiVoice Office 400 | Medium5.5 |
| CVE-2026-104706 | Mitel MiVoice Office 400 view system files path traversalMitel · Mitel MiVoice Office 400 | High8.4 |
| CVE-2024-41376 | dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.Public exploit | High8.8 |
| CVE-2023-35860 | A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the…Public exploit | Medium5.3 |
| CVE-2024-36857 | Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.Public exploit | High7.5 |
| CVE-2024-35429 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.Public exploit | Medium6.5 |
| CVE-2024-35431 | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE:…Public exploit | High7.5 |
| CVE-2024-24998 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.Ivanti · Avalanche | High8.8 |
| CVE-2019-6268 | RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by…Public exploit | High7.5 |
| CVE-2024-2044 | Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4Public exploitpgadmin.org · pgAdmin 4 | Critical9.9 |
| CVE-2024-28088 | LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This…Public exploit | High8.1 |
| CVE-2024-22723 | Webtrees 2.1.18 is vulnerable to Directory Traversal. By manipulating the "media_folder" parameter in the URL, an attacker (in this case, an administrator) can…Public exploit | Medium4.9 |
| CVE-2024-25840 | In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to 9.0 from Presta World for PrestaShop, a guest can download… | High7.5 |