Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,027All CVEsplus 19,141 rejected
- 262Last 24 hours3,249 in the last 7 days
- 16,944Last 30 days1,572 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 6 | 7 | 1 | 0 | 14 | 36 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 22 |
| 2024 | 0 | 1 | 9 | 2 | 0 | 12 | 21 |
| 2023 | 0 | 0 | 0 | 1 | 0 | 1 | 9 |
| 2022 | 0 | 4 | 1 | 0 | 0 | 5 | 8 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2020 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-76418 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityExploitedPublic exploitCisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | High8.6 |
| CVE-2026-87086 | Tanium addressed a denial of service vulnerability in Provision.Tanium · Provision | High7.5 |
| CVE-2026-82946 | Null Pointer Dereference in Mailbox Error HandlingRT-Labs AB · SOEM | Medium6.5 |
| CVE-2026-24160 | NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful…NVIDIA · TensorRT-LLM | Medium5.5 |
| CVE-2026-44638 | libsixel: NULL pointer dereferencePublic exploitsaitoha · libsixel | Low2.5 |
| CVE-2026-24411 | iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlSegmentedCurve::ToXml()InternationalColorConsortium · iccDEV | High7.1 |
| CVE-2026-24410 | iccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic()InternationalColorConsortium · iccDEV | High7.1 |
| CVE-2026-24409 | iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()Public exploitInternationalColorConsortium · iccDEV | High7.1 |
| CVE-2026-24404 | iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType()InternationalColorConsortium · iccDEV | High7.1 |
| CVE-2026-21689 | iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cppInternationalColorConsortium · iccDEV | Medium6.5 |
| CVE-2026-21502 | NULL Pointer Dereference in iccDEV XML Tag ParserInternationalColorConsortium · iccDEV | Medium5.5 |
| CVE-2026-21499 | NULL Pointer Dereference in iccDEV XML ParserInternationalColorConsortium · iccDEV | Medium5.5 |
| CVE-2026-21498 | NULL Pointer Dereference in iccDEV XML Calculator ParserInternationalColorConsortium · iccDEV | Medium5.5 |
| CVE-2026-21496 | NULL Pointer Dereference in iccDEV Signature ParserInternationalColorConsortium · iccDEV | Medium5.5 |
| CVE-2025-33192 | NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this…NVIDIA · DGX Spark | Medium5.7 |
| CVE-2024-42329 | JS - Crash on unexpected HTTP server responseZabbix · Zabbix | Low3.3 |
| CVE-2024-42328 | JS - Crash on empty HTTP server responseZabbix · Zabbix | Low3.3 |
| CVE-2024-31196 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-31185 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-31182 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-31175 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-31167 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-31165 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-31164 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-23916 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-23915 | NULL Pointer Dereference in libfluid_msg libraryOpen Networking Foundation (ONF) · libfluid | Medium5.3 |
| CVE-2024-23085 | Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::scramble(double[], int, int[]). NOTE:… | High7.5 |
| CVE-2020-36646 | MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerabilityMediaArea · ZenLib | Low3.5 |
| CVE-2022-41957 | muhammara vulnerable to Unchecked Return Value to NULL Pointer Dereferencejulianhille · MuhammaraJS | High7.5 |
| CVE-2022-39381 | Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cppPublic exploitjulianhille · MuhammaraJS | High7.5 |
| CVE-2022-22233 | Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashJuniper Networks · Junos OS | Medium5.5 |
| CVE-2022-22231 | SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashJuniper Networks · Junos OS | High7.5 |
| CVE-2022-20682 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service VulnerabilityCisco · Cisco IOS XE Software | High8.6 |
| CVE-2020-13582 | A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of…Micrium | High8.6 |
| CVE-2020-1648 | Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packetJuniper Networks · Junos OS | High7.5 |
| CVE-2020-6095 | An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup…GStreamer | High7.5 |