Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,955All CVEsplus 19,141 rejected
- 330Last 24 hours3,207 in the last 7 days
- 17,002Last 30 days1,575 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 1 | 0 | 0 | 6 | 16 |
| 2025 | 0 | 2 | 5 | 0 | 0 | 7 | 10 |
| 2024 | 2 | 0 | 0 | 0 | 0 | 2 | 3 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-78088 | Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parametercontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | High8.8 |
| CVE-2026-16586 | Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'contest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | Medium6.5 |
| CVE-2026-12165 | Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parametercontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | High8.8 |
| CVE-2026-8912 | Contest Gallery <= 28.1.6 - Unauthenticated SQL Injectioncontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | High7.5 |
| CVE-2026-4021 | Contest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusioncontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | High8.1 |
| CVE-2026-3180 | Contest Gallery <= 28.1.4 - Unauthenticated SQL Injectioncontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | High7.5 |
| CVE-2025-12849 | Contest Gallery <= 28.0.2 - Missing Authorizationcontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | Medium5.3 |
| CVE-2025-11254 | Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injectioncontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | Medium4.3 |
| CVE-2025-10383 | Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scriptingcontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | Medium6.4 |
| CVE-2025-7725 | Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI <= 26.1.0 - Unauthenticated Stored Cross-Site Scriptingcontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | High7.2 |
| CVE-2025-6716 | Contest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scriptingcontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | Medium6.4 |
| CVE-2025-3862 | Contest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parametercontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | Medium6.4 |
| CVE-2025-1513 | Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 26.0.0.1 - Unauthenticated Stored Cross-Site Scriptingcontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | High7.2 |
| CVE-2024-11103 | Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeovercontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | Critical9.8 |
| CVE-2024-10687 | Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injectioncontest-gallery · Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe | Critical9.8 |
| CVE-2019-5974 | Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of…Contest-Gallery · Contest Gallery | High8.8 |