Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,764All CVEsplus 19,141 rejected
- 677Last 24 hours3,064 in the last 7 days
- 17,172Last 30 days1,610 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 9 | 0 | 0 | 13 | 19 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 6 |
| 2024 | 0 | 2 | 3 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-93366 | Bludit CMS 3.22.0 Authorization Bypass via list-images/delete-image AJAX EndpointsBludit · Bludit CMS | Medium5.3 |
| CVE-2026-93365 | Bludit CMS 3.22.0 Missing Authorization via content-get-list AJAX EndpointBludit · Bludit CMS | High7.1 |
| CVE-2026-93364 | Bludit CMS 3.22.0 Mass Assignment Privilege Escalation via Pages::edit()Bludit · Bludit CMS | Medium5.3 |
| CVE-2026-72576 | Bludit - Stored Cross-Site Scripting via Malicious SVG Logo UploadBludit · Bludit | Medium5.4 |
| CVE-2026-46657 | Bludit's persistent authentication tokens not revoked upon account disablementbludit · bludit | High7.1 |
| CVE-2026-46656 | Bludit CMS has improper authorization and mediation failure leading to persistent ghost sessionsbludit · bludit | High8.8 |
| CVE-2026-41456 | Bludit CMS Reflected XSS via Search Pluginbludit · bludit | Medium5.1 |
| CVE-2026-4420 | Stored XSS via Page Creating functionality in BluditBludit · Bludit | Medium5.1 |
| CVE-2026-25099 | Remote Code Execution via Unrestricted File Upload in BluditBludit · Bludit | High8.7 |
| CVE-2026-25100 | Stored XSS via SVG File Upload in BluditBludit · Bludit | Medium4.8 |
| CVE-2026-25101 | Session Fixation in BluditBludit · Bludit | Medium4.8 |
| CVE-2026-27741 | Bludit <= 3.16.1 CSRF in Plugin and Theme Management EndpointsBludit · Bludit | Medium5.1 |
| CVE-2026-27742 | Bludit <= 3.16.2 Stored XSS in Post ContentBludit · Bludit | Medium5.1 |
| CVE-2023-53907 | Bludit < 3.13.0 Authenticated Arbitrary File Download via Backup PluginBludit · Backup Plugin | High7.1 |
| CVE-2024-24554 | Bludit - Insecure Token GenerationBludit · Bludit | Medium6.0 |
| CVE-2024-24553 | Bludit uses SHA1 as Password Hashing AlgorithmBludit · Bludit | Medium5.9 |
| CVE-2024-24552 | Bludit is Vulnerable to Session FixationBludit · Bludit | Medium5.6 |
| CVE-2024-24551 | Bludit - Remote Code Execution (RCE) through Image APIBludit · Bludit | High8.9 |
| CVE-2024-24550 | Bludit - Remote Code Execution (RCE) through File APIBludit · Bludit | High8.9 |