Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,307All CVEsplus 18,889 rejected
- 657Last 24 hours2,960 in the last 7 days
- 17,331Last 30 days1,581 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 10 | 53 | 33 | 0 | 98 | 98 |
| Title | ||
|---|---|---|
| CVE-2026-108015 | eMudhra Compromised Certificate vulnerability impacts HCL Notes ClientHCLSoftware · Notes Client | Critical9.1 |
| CVE-2026-108014 | eMudhra Compromised Certificate vulnerability impacts HCL Domino ServerHCLSoftware · Domino Server | Critical9.1 |
| CVE-2026-67165 | HCL Connections is vulnerable to cross-site scripting (XSS)HCLSoftware · Connections | Medium5.4 |
| CVE-2026-67075 | HCL Digital Experience is affected by improper input sanitationHCLSoftware · Digital Experience | Medium6.5 |
| CVE-2026-67071 | HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or TransferHCLSoftware · HCL DevOps Deploy / HCL Launch | Medium6.5 |
| CVE-2026-21827 | HCL Connections is vulnerable to an information disclosure vulnerabilityHCLSoftware · Connections | Low3.1 |
| CVE-2025-62341 | HCL Connections is vulnerable to server-side request forgery (SSRF)HCLSoftware · Connections | Low3.7 |
| CVE-2026-21808 | HCL BigFix Quantum Risk Analyzer is affected by logging sensitive informationHCLSoftware · BigFix Quantum Risk Analyzer | Medium4.1 |
| CVE-2026-21807 | HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflowHCLSoftware · BigFix Quantum Risk Analyzer | Low3.9 |
| CVE-2026-21810 | HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checkingHCLSoftware · BigFix Quantum Risk Analyzer | Medium4.4 |
| CVE-2026-21809 | HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive informationHCLSoftware · BigFix Quantum Risk Analyzer | Low3.9 |
| CVE-2026-56547 | An input reflection vulnerability affects HCL TravelerHCLSoftware · Traveler | Low3.5 |
| CVE-2025-68825 | HCL Hive is affected by incorrect default permissionsHCLSoftware · HCL Hive | High7.5 |
| CVE-2026-21752 | HCL Hive is affected by a use of vulnerable third-party componentsHCLSoftware · HCL Hive | High7.5 |
| CVE-2026-21755 | HCL Hive is affected by a missing rate limitHCLSoftware · HCL Hive | Medium5.3 |
| CVE-2025-68833 | HCL Hive is affected by use of a cryptographic primitive with a risky implementationHCLSoftware · HCL Hive | Medium5.3 |
| CVE-2026-21751 | HCL Hive is affected by use of a cryptographic primitive with a risky implementationHCLSoftware · HCL Hive | High7.4 |
| CVE-2026-21756 | HCL Hive is affected by a broken access control vulnerabilityHCLSoftware · HCL Hive | High7.2 |
| CVE-2026-21759 | HCL Hive is affected by an information exposure vulnerabilityHCLSoftware · HCL Hive | Medium4.3 |
| CVE-2026-56619 | HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS)HCLSoftware · HCL BigFix Mobile | Medium5.4 |
| CVE-2026-56620 | HCL BigFix Mobile is vulnerable to information disclosureHCLSoftware · HCL BigFix Mobile | Medium4.3 |
| CVE-2026-21766 | HCL Digital Experience and Digital Experience Compose insufficiently protects credentialsHCLSoftware · HCL Digital Experience and Digital Experience Compose | Medium5.4 |
| CVE-2026-56538 | HCL Connections is vulnerable to information disclosureHCLSoftware · Connections | Low3.5 |
| CVE-2026-56537 | HCL Connections is vulnerable to information disclosureHCLSoftware · Connections | Low3.5 |
| CVE-2026-56583 | HCL MyCloud was affected with Concurrent Login Vulnerability.HCLSoftware · MyCloud | Low3.1 |
| CVE-2026-56582 | HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability.HCLSoftware · MyCloud | Low3.1 |
| CVE-2026-56581 | HCL MyCloud was affected with Cookie Attribute Path Not SetHCLSoftware · MyCloud | Low2.6 |
| CVE-2026-56580 | HCL MyCloud was affected by Using Components with Known VulnerabilityHCLSoftware · MyCloud | Low2.2 |
| CVE-2026-56579 | HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor.HCLSoftware · MyCloud | Low3.1 |
| CVE-2026-56578 | HCL MyCloud was affected by Server Version DisclosureHCLSoftware · MyCloud | Low2.2 |
| CVE-2026-56577 | HCL MyCloud affected by Weak Password PolicyHCLSoftware · MyCloud | Low3.1 |
| CVE-2026-56586 | HCL IEM was affected with X-Content-Type-Options Header MissingHCLSoftware · IntelliOps Event Management | Low3.1 |
| CVE-2026-56585 | HCL IEM was affected with the Anti Clickjacking XFrame Options Header MissingHCLSoftware · IntelliOps Event Management | Low3.1 |
| CVE-2026-56587 | HCL IEM was affected with Strict transport security not enforcedHCLSoftware · IntelliOps Event Management | Low3.7 |
| CVE-2026-56584 | HCL IEM was affected with the Information disclosure nginx serverHCLSoftware · IntelliOps Event Management | Low3.7 |
| CVE-2023-37507 | An information disclosure vulnerability affects HCL DevOps PlanHCLSoftware · DevOps Plan | Medium6.9 |
| CVE-2023-37508 | HCL DevOps Plan is susceptible to a Cross-Site Scripting (XSS) vulnerabilityHCLSoftware · DevOps Plan | Low2.3 |
| CVE-2026-21824 | A privilege escalation vulnerability affects HCL CommerceHCLSoftware · Commerce | High8.8 |
| CVE-2025-59866 | The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables…HCLSoftware · DFMPro for CATIA | Low3.3 |
| CVE-2026-21764 | Insufficient Input Validation in DevOps LoopHCLSoftware · DevOps Loop | Low3.1 |
| CVE-2026-21762 | Missing HTTP Security Headers in DevOps LoopHCLSoftware · DevOps Loop | Low3.7 |
| CVE-2026-21761 | CORS Misconfiguration in DevOps LoopHCLSoftware · DevOps Loop | Medium4.2 |
| CVE-2026-21760 | Unauthorized Access to Admin Functionality via Forced BrowsingHCLSoftware · DevOps Loop | Medium4.6 |
| CVE-2024-23572 | HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should…HCLSoftware · Aftermarket EPC | Medium4.2 |
| CVE-2024-23570 | HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulnerable application in…HCLSoftware · Aftermarket EPC | Medium4.3 |
| CVE-2024-23578 | HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this request that allows…HCLSoftware · Aftermarket EPC | Medium4.2 |
| CVE-2024-23569 | HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" headerHCLSoftware · Aftermarket EPC | Medium4.3 |
| CVE-2024-23577 | HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol.…HCLSoftware · Aftermarket EPC | Medium4.3 |
| CVE-2024-23574 | HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or confirm valid users in…HCLSoftware · Aftermarket EPC | Medium5.3 |
| CVE-2024-42214 | HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are…HCLSoftware · Aftermarket EPC | Medium5.3 |