Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 452Last 24 hours2,722 in the last 7 days
- 16,914Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 4 | 0 | 0 | 9 | 34 |
| 2025 | 2 | 2 | 16 | 3 | 0 | 23 | 25 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2022 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-40321 | DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG uploaddnnsoftware · Dnn.Platform | High8.1 |
| CVE-2026-40306 | DNN has same HostGUID for all new installsdnnsoftware · Dnn.Platform | Medium6.9 |
| CVE-2026-40305 | DNN has Force Friend Request Acceptancednnsoftware · Dnn.Platform | Medium4.3 |
| CVE-2020-37103 | DotNetNuke 9.5 - Persistent Cross-Site ScriptingDnnsoftware · DotNetNuke | Medium5.1 |
| CVE-2026-24838 | DotNetNuke.Core Vulnerable to Stored XSS via Module Titlednnsoftware · Dnn.Platform | Critical9.1 |
| CVE-2026-24837 | DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modaldnnsoftware · Dnn.Platform | High7.7 |
| CVE-2026-24836 | DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotesdnnsoftware · Dnn.Platform | High7.7 |
| CVE-2026-24833 | DotNetNuke.Core Vulnerable to Stored XSS in Module Descriptiondnnsoftware · Dnn.Platform | High7.7 |
| CVE-2026-24784 | DotNetNuke.Core has a potential XSS vulnerability in modules' header and footerdnnsoftware · Dnn.Platform | Medium6.8 |
| CVE-2025-64095 | DNN Insufficient Access Control - Image Upload allows for Site Content Overwritednnsoftware · Dnn.Platform | Critical10.0 |
| CVE-2025-64094 | DNN vulnerable to stored cross-site-scripting (XSS) via SVG uploaddnnsoftware · Dnn.Platform | Medium6.4 |
| CVE-2025-62802 | DNN CKEditor Provider allows unauthenticated upload out-of-the-boxdnnsoftware · Dnn.Platform | Medium4.3 |
| CVE-2025-59548 | DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browserdnnsoftware · Dnn.Platform | Medium5.9 |
| CVE-2025-59547 | DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscationdnnsoftware · Dnn.Platform | Medium5.3 |
| CVE-2025-59821 | DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profilednnsoftware · Dnn.Platform | Medium6.5 |
| CVE-2025-59546 | DNN Vulnerable to Stored XSS Using Backend Admin Credentialsdnnsoftware · Dnn.Platform | Low2.4 |
| CVE-2025-59545 | DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt modulednnsoftware · Dnn.Platform | Critical9.1 |
| CVE-2025-59539 | DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography fielddnnsoftware · Dnn.Platform | Medium6.3 |
| CVE-2025-59535 | DotNetNuke.Core allows loading of unused themes on anonymous clients through query parametersdnnsoftware · Dnn.Platform | Medium6.5 |
| CVE-2025-52488 | DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user inputdnnsoftware · Dnn.Platform | High8.6 |
| CVE-2025-52487 | DNN.PLATFORM possibly allows bypass of IP Filtersdnnsoftware · Dnn.Platform | High8.8 |
| CVE-2025-52486 | DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjectsdnnsoftware · Dnn.Platform | Medium6.1 |
| CVE-2025-52485 | DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feeddnnsoftware · Dnn.Platform | Medium5.1 |
| CVE-2025-48377 | Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit modednnsoftware · Dnn.Platform | Medium6.0 |
| CVE-2025-48378 | Dnn.Platform vulnerable to Stored Cross-Site Scripting (XSS) with svg files rendered inlinednnsoftware · Dnn.Platform | Medium6.1 |
| CVE-2025-48376 | Dnn.Platform's Site Import could use an external source with a crafted requestdnnsoftware · Dnn.Platform | Low3.5 |
| CVE-2025-32374 | Possible Denial of Service (DoS) in DNN.PLATFORM registrationdnnsoftware · Dnn.Platform | Medium5.9 |
| CVE-2025-32373 | DNN allows a registered user to enumerate and access files they should not have access todnnsoftware · Dnn.Platform | Medium6.5 |
| CVE-2025-32372 | Server-Side Request Forgery (SSRF) in DotNetNuke.Corednnsoftware · Dnn.Platform | Medium6.5 |
| CVE-2025-32371 | Unexpected external content may be displayed in DNN ImageHandlerdnnsoftware · Dnn.Platform | Medium4.3 |
| CVE-2025-32036 | DNN allows the possibility of bypassing Captchadnnsoftware · Dnn.Platform | Medium4.2 |
| CVE-2025-32035 | DNN does not check the contents of a file when uploading filesdnnsoftware · Dnn.Platform | Low2.6 |
| CVE-2022-2922 | Relative Path Traversal in dnnsoftware/dnn.platformdnnsoftware · dnnsoftware/dnn.platform | Medium4.9 |
| CVE-2021-40186 | DNN CMS Server-Side Request Forgery (SSRF)DNNSoftware · DNN Platform | Medium6.5 |