Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,739All CVEsplus 19,141 rejected
  • 660Last 24 hours3,039 in the last 7 days
  • 17,185Last 30 days1,610 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260210038
20250010015
20240110024
20230000002
20220000002
20210010012
20200000001
20190010011

Latest CVEs

8 CVEs, newest first

CVEs, newest first
Title
CVE-2026-95105
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flippingdanielberkompas · cloak
High8.2
CVE-2026-105208
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokenszitadel · zitadel
High8.7
CVE-2025-41351
Weak encryption on Funambol's cloud serverFunambol · Cloud Server
Medium6.0
CVE-2025-5323
fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checkingfossasia · open-event-server
Medium6.3
CVE-2024-10772
SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modificationSICK AG · SICK InspectorP61x
High8.8
CVE-2024-36279
Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior…FreeFrom K.K. · "FreeFrom - the nostr client" App for Android
Medium5.3
CVE-2010-3300
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.OWASP ESAPI
Medium5.9
CVE-2019-3730
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an…Dell · RSA BSAFE MES
Medium5.9