Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,589All CVEsplus 18,890 rejected
- 356Last 24 hours2,959 in the last 7 days
- 17,105Last 30 days1,584 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 0 | 0 | 0 | 3 | 18 |
| 2025 | 0 | 3 | 0 | 0 | 0 | 3 | 15 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 12 |
| 2023 | 0 | 1 | 4 | 1 | 0 | 6 | 12 |
| 2022 | 0 | 1 | 1 | 0 | 0 | 2 | 6 |
| 2021 | 0 | 3 | 1 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-25063 | gradle-completion has a Bash command injection issuegradle · gradle-completion | High8.3 |
| CVE-2026-22865 | Gradle's failure to disable repositories failing to answer can expose builds to malicious artifactsgradle · gradle | High8.6 |
| CVE-2026-22816 | Gradle fails to disable repositories which can expose builds to malicious artifactsgradle · gradle | High8.6 |
| CVE-2025-27148 | Gradle vulnerable to local privilege escalation through system temporary directorygradle · gradle | High8.8 |
| CVE-2025-24858 | Develocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has network access to a Develocity server to obtain the hashed password of the…Gradle · Enterprise | High8.3 |
| CVE-2024-46881 | Develocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control. Project-level access control configuration was introduced in Enterprise…Gradle · Enterprise | High7.1 |
| CVE-2023-42445 | Possible local file exfiltration by XML External entity injectiongradle · gradle | Medium6.8 |
| CVE-2023-44387 | Gradle has incorrect permission assignment for symlinked files used in copy or archiving operationsgradle · gradle | Low3.2 |
| CVE-2023-35946 | Dependency cache path traversal in Gradlegradle · gradle | Medium6.9 |
| CVE-2023-35947 | Path traversal vulnerabilities in handling of Tar archives in Gradlegradle · gradle | Medium6.9 |
| CVE-2023-30853 | Gradle Build Action data written to GitHub Actions Cache may expose secretsgradle · gradle-build-action | High7.6 |
| CVE-2023-26053 | Gradle usage of long IDs for PGP keys opens potential for collision attacksgradle · gradle | Medium6.6 |
| CVE-2022-31156 | Gradle's dependency verification can ignore checksum verification when signature verification cannot be performedgradle · gradle | Medium6.6 |
| CVE-2022-23630 | Dependency verification bypass in Gradlegradle · gradle | High7.5 |
| CVE-2021-32751 | Arbitrary code execution via specially crafted environment variablesgradle · gradle | High7.5 |
| CVE-2021-29427 | Repository content filters do not work in Settings pluginManagementgradle · gradle | High8.0 |
| CVE-2021-29428 | Local privilege escalation through system temporary directorygradle · gradle | High8.8 |
| CVE-2021-29429 | Information disclosure through temporary directory permissionsgradle · gradle | Medium4.0 |