Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,720 in the last 7 days
- 16,914Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 9 | 40 | 28 | 2 | 1 | 80 | 86 |
| 2025 | 0 | 2 | 3 | 0 | 0 | 5 | 6 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-84473 | CVE-2026-84473Kiteworks · ownCloud | Not scored |
| CVE-2026-102105 | Kiteworks Email Protection Gateway server-side request forgeryKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102106 | Kiteworks Email Protection Gateway improper authenticationKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102107 | Kiteworks Core user impersonation in a file-request featureKiteworks · Core | Medium4.6 |
| CVE-2026-102108 | Kiteworks Email Protection Gateway deserialization of untrusted dataKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102109 | Kiteworks Secure Data Forms SQL injectionKiteworks · Secure Data Forms | High7.1 |
| CVE-2026-102110 | Missing authentication on a Kiteworks appliance setup functionKiteworks · Core | Medium5.9 |
| CVE-2026-102111 | Kiteworks Core Improper Validation of Specified Quantity in InputKiteworks · Core | Medium4.9 |
| CVE-2026-102112 | Kiteworks Core Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102113 | Kiteworks Core Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102114 | Kiteworks Core OS Command InjectionKiteworks · Core | High7.2 |
| CVE-2026-102115 | Kiteworks Core Authentication Bypass in the Password Reset WorkflowKiteworks · Core | Critical9.8 |
| CVE-2026-102116 | Kiteworks Email Protection Gateway Path TraversalKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102117 | Kiteworks Core Remote Code ExecutionKiteworks · Core | High7.2 |
| CVE-2026-102118 | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102119 | Kiteworks Email Protection Gateway Path TraversalKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102120 | Kiteworks Core OS Command InjectionKiteworks · Core | High8.8 |
| CVE-2026-102121 | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized ActorKiteworks · Secure Data Forms | High8.6 |
| CVE-2026-102104 | Kiteworks Email Protection Gateway server-side request forgeryKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102122 | Kiteworks Core Incorrect AuthorizationKiteworks · Core | Medium4.3 |
| CVE-2026-102123 | Kiteworks Core Path TraversalKiteworks · Core | High7.4 |
| CVE-2026-102103 | Kiteworks Email Protection Gateway server-side request forgeryKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102124 | Kiteworks Core Missing Authentication for Critical FunctionKiteworks · Core | Medium6.5 |
| CVE-2026-102125 | Kiteworks Core Sandbox EscapeKiteworks · Core | High8.8 |
| CVE-2026-102126 | Kiteworks Core Stored Cross-site Scripting (XSS)Kiteworks · Core | High8.1 |
| CVE-2026-102127 | Kiteworks Email Protection Gateway Improper Restriction of XML External Entity ReferenceKiteworks · Email Protection Gateway | High7.0 |
| CVE-2026-102128 | Kiteworks Email Protection Gateway Improper AuthenticationKiteworks · Email Protection Gateway | High7.5 |
| CVE-2026-102129 | Kiteworks Core Incorrect Privilege AssignmentKiteworks · Core | High7.2 |
| CVE-2026-102130 | Kiteworks Email Protection Gateway Remote Code ExecutionKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102131 | Kiteworks Email Protection Gateway Improper Handling of Case SensitivityKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102132 | Kiteworks Core Privilege Escalation through Improper Access ControlKiteworks · Core | High7.2 |
| CVE-2026-102133 | Kiteworks Core Arbitrary File Write through Command InjectionKiteworks · Core | Medium6.6 |
| CVE-2026-102102 | Kiteworks Email Protection Gateway server-side request forgeryKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102134 | Kiteworks Core Unprotected Alternate ChannelKiteworks · Core | Medium5.4 |
| CVE-2026-102135 | Kiteworks Email Protection Gateway Deserialization of Untrusted DataKiteworks · Email Protection Gateway | Medium6.6 |
| CVE-2026-102136 | Kiteworks Core Command Execution through Configuration InjectionKiteworks · Core | Medium6.3 |
| CVE-2026-102137 | Kiteworks Core Unrestricted Upload of File with Dangerous TypeKiteworks · Core | Medium4.1 |
| CVE-2026-102138 | Kiteworks Core Server-Side Request Forgery (SSRF)Kiteworks · Core | Low3.3 |
| CVE-2026-102101 | Kiteworks Core deserialization of untrusted dataKiteworks · Core | High8.1 |
| CVE-2026-102139 | Kiteworks Email Protection Gateway Incorrect AuthorizationKiteworks · Email Protection Gateway | Medium6.5 |
| CVE-2026-102140 | Kiteworks Core Insufficient Verification of Data AuthenticityKiteworks · Core | Medium4.9 |
| CVE-2026-102141 | Kiteworks Core Privilege Escalation through External Control of File Name or PathKiteworks · Core | Medium6.7 |
| CVE-2026-102142 | Kiteworks Core Remote Code Execution through Server-Side Template InjectionKiteworks · Core | High7.2 |
| CVE-2026-102143 | Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous TypeKiteworks · Email Protection Gateway | High7.5 |
| CVE-2026-102100 | Kiteworks Core stored XSSKiteworks · Core | High8.7 |
| CVE-2026-102144 | Kiteworks Email Protection Gateway Uncontrolled Resource ConsumptionKiteworks · Email Protection Gateway | Medium5.3 |
| CVE-2026-102150 | Kiteworks Secure Data Forms Missing Authentication for Critical FunctionKiteworks · Secure Data Forms | High7.2 |
| CVE-2026-102149 | Kiteworks Email Protection Gateway Improper Access ControlKiteworks · Email Protection Gateway | Critical9.4 |
| CVE-2026-102147 | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)Kiteworks · Core | Critical9.3 |
| CVE-2026-102146 | Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template InjectionKiteworks · Email Protection Gateway | Medium6.5 |