Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,582All CVEsplus 19,141 rejected
- 685Last 24 hours2,968 in the last 7 days
- 17,114Last 30 days1,611 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 7 | 0 | 0 | 10 | 61 |
| 2025 | 0 | 3 | 14 | 3 | 0 | 20 | 51 |
| 2024 | 0 | 3 | 7 | 0 | 0 | 10 | 31 |
| 2023 | 0 | 0 | 3 | 0 | 0 | 3 | 21 |
| 2022 | 0 | 1 | 3 | 0 | 0 | 4 | 18 |
| 2021 | 0 | 1 | 4 | 0 | 0 | 5 | 14 |
| 2020 | 0 | 1 | 2 | 0 | 0 | 3 | 9 |
| 2019 | 0 | 2 | 1 | 0 | 0 | 3 | 6 |
| 2018 | 0 | 2 | 0 | 0 | 0 | 2 | 3 |
| 2017 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-82976 | Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secretRed Hat · Red Hat OpenShift Container Platform 4 | High7.1 |
| CVE-2026-82778 | An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote…Contec Co., Ltd. · Integrated Type CPS-PC341[][]-*-9201 | Medium5.3 |
| CVE-2026-82775 | An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL…Contec Co., Ltd. · M2M Gateway Integrated Type CPS-MG341* | Medium5.3 |
| CVE-2026-19987 | SourceCodester Best Employee Management System Profile exposure of information through directory listingSourceCodester · Best Employee Management System | Medium6.9 |
| CVE-2026-50233 | Lyrion Music Server 9.2.0 Arbitrary Directory ListingLMS Community · Lyrion Music Server | Medium6.9 |
| CVE-2025-32750 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with…Dell · PowerFlex Manager (Appliance) | High7.5 |
| CVE-2026-41933 | Vvveb < 1.0.8.3 Directory Listing Information Disclosuregivanz · Vvveb | Medium6.9 |
| CVE-2026-22860 | Rack has a Directory Traversal via Rack:Directoryrack · rack | High7.5 |
| CVE-2023-38265 | Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]IBM · Cloud Pak System | Medium5.3 |
| CVE-2020-36921 | RED-V Super Digital Signage System 5.1.1 Log Information Disclosure VulnerabilityRED · RED-V Super Digital Signage System RXV-A740R | Medium6.9 |
| CVE-2022-50788 | SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Information Disclosure via Log DirectorySOUND4 Ltd. · Impact/Pulse/First | Medium6.9 |
| CVE-2021-47718 | OpenBMCS Directory Listing Information DisclosureOPEN BMCS · OpenBMCS | High8.7 |
| CVE-2024-56464 | IBM QRadar SIEM is affected by an information disclosure vulnerabilityIBM · IBM QRadar SIEM | Low2.7 |
| CVE-2025-13200 | SourceCodester Farm Management System exposure of information through directory listingSourceCodester · Farm Management System | Medium6.9 |
| CVE-2025-62396 | Moodle: router (r.php) could expose application directoriesmoodle | Medium5.3 |
| CVE-2025-27906 | IBM Content Navigator information disclosureIBM · Content Navigator | Medium5.3 |
| CVE-2025-61685 | Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposuremastra-ai · mastra | Medium6.5 |
| CVE-2025-28170 | Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing… | High7.6 |
| CVE-2025-2827 | IBM Sterling File Gateway information disclosureIBM · Sterling File Gateway | Medium4.3 |
| CVE-2025-27452 | CVE-2025-27452Endress+Hauser · Endress+Hauser MEAC300-FNADE4 | Medium5.3 |
| CVE-2025-4909 | SourceCodester Client Database Management System exposure of information through directory listingSourceCodester · Client Database Management System | Medium6.9 |
| CVE-2025-4807 | SourceCodester Online Student Clearance System exposure of information through directory listingSourceCodester · Online Student Clearance System | Medium6.9 |
| CVE-2025-1138 | IBM Information Server information disclosureIBM · InfoSphere Information Server | Medium4.3 |
| CVE-2025-45320 | A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0. | High7.5 |
| CVE-2025-23378 | Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an exposure of information through directory listing vulnerability. A low privileged…Dell · PowerScale OneFS | Low3.3 |
| CVE-2025-2652 | SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listingSourceCodester · Employee and Visitor Gate Pass Logging System | Medium6.9 |
| CVE-2025-2651 | SourceCodester Online Eyewear Shop admin exposure of information through directory listingSourceCodester · Online Eyewear Shop | Medium6.9 |
| CVE-2025-2038 | code-projects Blood Bank Management System upload exposure of information through directory listingcode-projects · Blood Bank Management System | Medium6.9 |
| CVE-2024-28766 | IBM Security Directory Integrator information disclosureIBM · Security Directory Integrator | Low2.4 |
| CVE-2024-35113 | IBM Control Center information disclosureIBM · Control Center | Medium4.3 |
| CVE-2024-8711 | SourceCodester Food Ordering Management System includes exposure of information through directory listingSourceCodester · Food Ordering Management System | Medium6.9 |
| CVE-2024-45096 | IBM Aspera Faspex information disclosureIBM · Aspera Faspex | Medium6.5 |
| CVE-2024-7912 | CodeAstro Online Railway Reservation System assets exposure of information through directory listingCodeAstro · Online Railway Reservation System | Medium6.9 |
| CVE-2024-7809 | SourceCodester Online Graduate Tracer System nbproject exposure of information through directory listingSourceCodester · Online Graduate Tracer System | Medium6.9 |
| CVE-2024-42007 | SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files. | Medium5.8 |
| CVE-2024-3707 | Exposure of Information Through Directory Listing vulnerability in OpenGnsysOpenGnsys · OpenGnsys | Medium5.3 |
| CVE-2024-2340 | Avada <= 7.11.6 - Unauthenticated Sensitive Information Exposure via Form Uploads Directory ListingThemeFusion · Avada | Website Builder For WordPress & WooCommerce | Medium5.3 |
| CVE-2024-22082 | An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Unauthenticated directory listing can occur: the web interface cay be… | High7.5 |
| CVE-2023-49979 | A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without… | High7.5 |
| CVE-2023-51948 | A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to list the files hosted by the web… | High7.5 |
| CVE-2022-36243 | Directory Traversal on Shop Beat ServicesShop Beat · studio | Medium5.3 |
| CVE-2016-15019 | tombh jekbox server.rb exposure of information through directory listingtombh · jekbox | Medium4.3 |
| CVE-2014-125069 | saxman maps-js-icoads exposure of information through directory listingsaxman · maps-js-icoads | Medium4.3 |
| CVE-2021-45446 | Pentaho Business Analytics Server - Exposure of Information Through Directory ListingHitachi Vantara · Pentaho Business Analytics Server | Medium5.0 |
| CVE-2022-30625 | Chcnav - P5E GNSS Directory listingChcnav · Chcnav - P5E GNSS | Medium5.7 |
| CVE-2021-27505 | mySCADA myPRO Exposure of Information Through Directory ListingmySCADA · myPRO | High7.5 |
| CVE-2021-23195 | Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listingFresenius Kabi · Vigilant Software Suite (Mastermed Dashboard) | Medium5.3 |
| CVE-2021-21528 | Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is…Dell · PowerScale OneFS | High7.5 |
| CVE-2021-32515 | QSAN Storage Manager - Exposure of Information Through Directory ListingQSAN · Storage Manager | Medium5.3 |
| CVE-2021-32511 | QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList functionQSAN · Storage Manager | Medium4.3 |