Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,623All CVEsplus 18,890 rejected
- 387Last 24 hours2,977 in the last 7 days
- 17,115Last 30 days1,582 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 8 | 14 | 0 | 0 | 23 | 34 |
| 2025 | 0 | 0 | 6 | 2 | 0 | 8 | 11 |
| 2024 | 2 | 1 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-107334 | Incorrect Authorization in MalcolmCISA · Malcolm | Medium5.4 |
| CVE-2026-107335 | Improper Handling of Highly Compressed Data in MalcolmCISA · Malcolm | Medium6.5 |
| CVE-2026-107337 | Cross-Site Request Forgery in MalcolmCISA · Malcolm | High7.1 |
| CVE-2026-107361 | Authentication Bypass Using an Alternate Path or Channel in MalcolmCISA · Malcolm | Medium4.2 |
| CVE-2026-107362 | Server-Side Request Forgery in MalcolmCISA · Malcolm | High7.1 |
| CVE-2026-107333 | Incorrect Authorization in MalcolmCISA · Malcolm | High8.1 |
| CVE-2026-107336 | Authentication Bypass by Spoofing in MalcolmCISA · Malcolm | Medium6.5 |
| CVE-2026-90457 | The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file…CISA · Malcolm | Medium6.9 |
| CVE-2026-90456 | Use of default credentials in MalcolmCISA · Malcolm | Critical9.2 |
| CVE-2026-90455 | Dependency on vulnerable third-party component in MalcolmCISA · Malcolm | Medium6.3 |
| CVE-2026-90454 | Missing authorization in MalcolmCISA · Malcolm | Medium5.3 |
| CVE-2026-90453 | Open Redirect in MalcolmCISA · Malcolm | Medium5.1 |
| CVE-2026-90452 | Improper certificate validation in MalcolmCISA · Malcolm | Medium6.0 |
| CVE-2026-90451 | Use of Default Credentials in MalcolmCISA · Malcolm | High8.2 |
| CVE-2026-90450 | Incorrect Authorization in MalcolmCISA · Malcolm | Medium5.3 |
| CVE-2026-90449 | Missing Authentication for Critical Function in MalcolmCISA · Malcolm | Medium6.9 |
| CVE-2026-90448 | Missing Authorization in MalcolmCISA · Malcolm | High7.1 |
| CVE-2026-90447 | Authentication Bypass by Spoofing in MalcolmCISA · Malcolm | High7.1 |
| CVE-2026-90446 | Server-Side Request Forgery in MalcolmCISA · Malcolm | Medium5.3 |
| CVE-2026-90445 | Path Traversal in MalcolmCISA · Malcolm | High7.1 |
| CVE-2026-90444 | OS Command Injection in MalcolmCISA · Malcolm | High8.7 |
| CVE-2026-90443 | Cross-site Scripting in MalcolmCISA · Malcolm | Medium5.3 |
| CVE-2026-43510 | CISA manage.get.gov insecure portfolio administrative privilegesCISA · manage.get.gov | Medium5.1 |
| CVE-2025-67634 | Software Acquisition Guide Supplier Response Web Tool XSSCISA · Software Acquisition Guide Tool | Medium4.6 |
| CVE-2025-35436 | CISA Thorium account verification email error handlingCISA · Thorium | Medium6.9 |
| CVE-2025-35435 | CISA Thorium download stream divide by zeroCISA · Thorium | Medium5.3 |
| CVE-2025-35434 | CISA Thorium does not validate TLS connections to ElasticsearchCISA · Thorium | Low2.3 |
| CVE-2025-35433 | CISA Thorium does not properly invalidate previously used tokensCISA · Thorium | Low2.3 |
| CVE-2025-35432 | CISA Thorium does not rate limit account verification email messagesCISA · Thorium | Medium6.9 |
| CVE-2025-35431 | CISA Thorium LDAP injectionCISA · Thorium | Medium5.3 |
| CVE-2025-35430 | CISA Thorium insecure downloaded file path validationCISA · Thorium | Medium5.3 |
| CVE-2023-7242 | Ethercat Zeek Plugin Out-of-bounds ReadCISA · Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek | High8.2 |
| CVE-2023-7243 | Ethercat Zeek Plugin Out-of-bounds WriteCISA · Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek | Critical9.8 |
| CVE-2023-7244 | Ethercat Zeek Plugin Out-of-bounds WriteCISA · Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek | Critical9.8 |