Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,933All CVEsplus 19,141 rejected
- 327Last 24 hours3,187 in the last 7 days
- 17,003Last 30 days1,575 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 6 | 0 | 0 | 6 | 12 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 6 |
| 2023 | 1 | 1 | 1 | 0 | 0 | 3 | 5 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2021 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-119140 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yieldbytecodealliance · wasmtime | Medium5.9 |
| CVE-2023-54406 | Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scriptsfrappe · frappe | Medium6.9 |
| CVE-2026-84897 | wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusionwolfSSL Inc. · wolfSSH | Medium6.9 |
| CVE-2026-41388 | OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation HandlingOpenClaw · OpenClaw | Medium6.3 |
| CVE-2026-41340 | OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom MigrationOpenClaw · OpenClaw | Medium6.3 |
| CVE-2026-41300 | OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote OnboardingOpenClaw · OpenClaw | Medium6.9 |
| CVE-2024-22590 | The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten…Public exploit | Critical9.1 |
| CVE-2023-4012 | Incomplete Internal State Distinction in ntpsecNTPsec · ntpsec | High7.5 |
| CVE-2023-36834 | Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoSJuniper Networks · Junos OS | Medium6.5 |
| CVE-2023-31127 | DMTF-2023-0001: SPDM mutual authentication bypassDMTF · libspdm | Critical9.1 |
| CVE-2021-25735 | Validating Admission Webhook does not observe some previous fieldsKubernetes · Kubernetes | Medium6.5 |
| CVE-2020-27222 | In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to…The Eclipse Foundation · Eclipse Californium | High7.5 |