Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 401,310All CVEsplus 19,140 rejected
- 462Last 24 hours2,731 in the last 7 days
- 16,922Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 0 | 0 | 0 | 0 | 2 | 16 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 14 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 14 |
| 2023 | 0 | 2 | 4 | 3 | 0 | 9 | 14 |
| 2022 | 0 | 0 | 3 | 0 | 0 | 3 | 5 |
| 2021 | 1 | 1 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2023-54344 | Eclipse Equinox OSGi 3.7.2 Remote Code Execution via ConsoleEclipse · Equinox OSGi | Critical9.3 |
| CVE-2023-54342 | Eclipse Equinox OSGi 3.8-3.18 Console Remote Code ExecutionEclipse · Equinox OSGi | Critical9.3 |
| CVE-2023-5632 | Unconditionally adding an event to the epoll causes excessive CPU consumptionEclipse · Mosquitto | High7.5 |
| CVE-2023-36478 | HTTP/2 HPACK integer overflow and buffer allocationeclipse · jetty.project | High7.5 |
| CVE-2023-3592 | In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.Eclipse · Mosquitto | Medium5.8 |
| CVE-2023-0809 | In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.Eclipse · Mosquitto | Medium5.8 |
| CVE-2023-41900 | Jetty's OpenId Revoked authentication allows one requesteclipse · jetty.project | Low3.5 |
| CVE-2023-40167 | Jetty accepts "+" prefixed value in Content-Lengtheclipse · jetty.project | Medium5.3 |
| CVE-2023-36479 | Jetty vulnerable to errant command quoting in CGI Servleteclipse · jetty.project | Low3.5 |
| CVE-2023-26049 | Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jettyeclipse · jetty.project | Low2.4 |
| CVE-2023-26048 | OutOfMemoryError for large multipart without filename in Eclipse Jettyeclipse · jetty.project | Medium5.3 |
| CVE-2022-36022 | Some Deeplearning4J packages use unclaimed s3 bucket in tests and exampleseclipse · deeplearning4j | Medium5.3 |
| CVE-2021-38443 | Eclipse CycloneDDS Improper Handling of Syntactically Invalid StructureEclipse · CycloneDDS | Medium6.6 |
| CVE-2021-38441 | Eclipse CycloneDDS Write-what-where ConditionEclipse · CycloneDDS | Medium6.6 |
| CVE-2021-32835 | Groovy Sandbox escape in Eclipse Ketieclipse · keti | Critical9.9 |
| CVE-2021-32834 | Arbitrary Groovy script evaluation in Eclipse Ketieclipse · keti | High8.2 |