Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,736All CVEsplus 19,141 rejected
- 659Last 24 hours3,036 in the last 7 days
- 17,189Last 30 days1,611 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 6 | 0 | 0 | 0 | 7 | 16 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 9 |
| 2024 | 2 | 2 | 2 | 1 | 0 | 7 | 9 |
| 2023 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-91184 | NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric | High8.7 |
| CVE-2026-77180 | NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller | High8.7 |
| CVE-2026-66362 | NGF vulnerabilityF5 · NGINX Gateway Fabric | High8.6 |
| CVE-2026-54722 | dssrf: there a critical security bug with remove_at_symbol_in_stringHackingRepo · dssrf-js | High8.7 |
| CVE-2026-55723 | NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller | High8.7 |
| CVE-2026-11311 | NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric | High8.6 |
| CVE-2026-28292 | simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCEsteveukx · simple-git | Critical9.8 |
| CVE-2024-4897 | Remote Code Execution in parisneo/lollms-webuiparisneo · parisneo/lollms-webui | High8.4 |
| CVE-2024-34359 | llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadataabetlen · llama-cpp-python | Critical9.7 |
| CVE-2024-2952 | Server-Side Template Injection in BerriAI/litellmberriai · berriai/litellm | Critical9.8 |
| CVE-2024-1883 | Reflected XSS in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | Medium6.3 |
| CVE-2024-1882 | Server-side resource injection in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | High7.2 |
| CVE-2024-1221 | Improper access controls on APIs on Linux and macOS in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | Low3.1 |
| CVE-2024-21600 | Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge conditionJuniper Networks · Junos OS | Medium6.5 |
| CVE-2023-1149 | Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverbtcpayserver · btcpayserver/btcpayserver | Medium5.7 |
| CVE-2023-0493 | Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverbtcpayserver · btcpayserver/btcpayserver | Medium5.3 |