Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,581All CVEsplus 19,141 rejected
- 684Last 24 hours2,967 in the last 7 days
- 17,116Last 30 days1,610 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 7 | 1 | 0 | 9 | 12 |
| 2025 | 0 | 1 | 2 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-73860 | CRIU: Parasite hijack triggered by snapshot of malicious softwarecheckpoint-restore · criu | Medium5.4 |
| CVE-2026-120341 | mathurvishal CloudClassroom-PHP-Project studentdetails.php redirectmathurvishal · CloudClassroom-PHP-Project | Medium6.9 |
| CVE-2026-55537 | PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114MervinPraison · PraisonAI | High7.1 |
| CVE-2026-45819 | baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate…web-platform-dx · baseline-browser-mapping | Medium6.6 |
| CVE-2026-40208 | Denial of service via DoH3 queriesPowerDNS · DNSdist | Low3.7 |
| CVE-2026-10271 | a4m4 Student-Management-System Admin Endpoint admin redirecta4m4 · Student-Management-System | Medium5.3 |
| CVE-2026-3449 | Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used.…@tootallnate/once | Medium4.8 |
| CVE-2026-3264 | go2ismail Free-CRM Administrative redirectgo2ismail · Free-CRM | Medium5.3 |
| CVE-2026-3262 | go2ismail Asp.Net-Core-Inventory-Order-Management-System Administrative redirectgo2ismail · Asp.Net-Core-Inventory-Order-Management-System | Medium5.3 |
| CVE-2025-53856 | TMM vulnerabilityF5 · BIG-IP | High8.7 |
| CVE-2024-45433 | OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue… | Medium6.5 |
| CVE-2025-9848 | ScriptAndTools Real Estate Management System userlist.php redirectScriptAndTools · Real Estate Management System | Medium6.9 |