Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,283All CVEsplus 19,140 rejected
- 448Last 24 hours2,726 in the last 7 days
- 16,929Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 7 | 3 | 0 | 0 | 10 | 25 |
| 2025 | 0 | 7 | 4 | 0 | 0 | 11 | 15 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2023 | 0 | 0 | 4 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-109206 | LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServletLogicalDOC · LogicalDOC Community Edition | Medium6.9 |
| CVE-2026-109205 | LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServletLogicalDOC · LogicalDOC Community Edition | High8.7 |
| CVE-2026-109204 | LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery TicketLogicalDOC · LogicalDOC Community Edition | Medium5.3 |
| CVE-2026-109203 | LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf ServletLogicalDOC · LogicalDOC Community Edition | High7.1 |
| CVE-2026-109202 | LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export ServletLogicalDOC · LogicalDOC Community Edition | High7.1 |
| CVE-2026-109201 | LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentServiceLogicalDOC · LogicalDOC Community Edition | High8.7 |
| CVE-2026-109200 | LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet hrefLogicalDOC · LogicalDOC Community Edition | Medium5.3 |
| CVE-2026-109199 | LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail TemplateLogicalDOC · LogicalDOC Community Edition | High8.7 |
| CVE-2026-109170 | LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed ParameterLogicalDOC · LogicalDOC Community Edition | High7.1 |
| CVE-2026-109169 | LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetterLogicalDOC · LogicalDOC Community Edition | High7.1 |
| CVE-2025-12547 | LogicalDOC Community Edition Admin Login login.jsp excessive authenticationLogicalDOC · Community Edition | Medium6.3 |
| CVE-2025-12546 | LogicalDOC Community Edition API Key creation UI cross site scriptingLogicalDOC · Community Edition | Medium5.1 |
| CVE-2025-11946 | LogicalDOC Community Edition Add Contact frontend.jsp cross site scriptingLogicalDOC · Community Edition | Medium5.1 |
| CVE-2024-12245 | Blind SQL Injection in LogoutLogicalDOC · LogicalDOC Community | High8.7 |
| CVE-2024-12020 | Reflected Cross-Site Scripting (XSS)LogicalDOC · LogicalDOC Enterprise | Medium6.4 |
| CVE-2024-12019 | Arbitrary File Read via Document APILogicalDOC · LogicalDOC Community | High7.1 |
| CVE-2024-54449 | Remote Code Execution (RCE) via Arbitrary File Write In Document APILogicalDOC · LogicalDOC Community | High8.7 |
| CVE-2024-54448 | Remote Code Execution (RCE) via Automation ScriptingLogicalDOC · LogicalDOC Community | High8.6 |
| CVE-2024-54447 | Blind SQLi in Saved SearchLogicalDOC · LogicalDOC Community | High7.1 |
| CVE-2024-54446 | Blind SQLi in Document HistoryLogicalDOC · LogicalDOC Community | High7.1 |
| CVE-2024-54445 | Blind SQLi in LoginLogicalDOC · LogicalDOC Community | High8.7 |
| CVE-2022-47418 | LogicalDOC Document Version Comment Stored XSSLogicalDOC · LogicalDOC Enterprise | Medium5.4 |
| CVE-2022-47417 | LogicalDOC Document File Name Stored XSSLogicalDOC · LogicalDOC Enterprise | Medium5.4 |
| CVE-2022-47416 | LogicalDOC Chat Stored XSSLogicalDOC · LogicalDOC Enterprise | Medium5.4 |
| CVE-2022-47415 | LogicalDOC Messaging Stored XSSLogicalDOC · LogicalDOC Enterprise | Medium5.4 |