Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,283All CVEsplus 19,140 rejected
  • 448Last 24 hours2,726 in the last 7 days
  • 16,929Last 30 days1,556 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026073001025
2025074001115
20240000004
20230040044

Latest CVEs

25 CVEs, newest first

CVEs, newest first
Title
CVE-2026-109206
LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServletLogicalDOC · LogicalDOC Community Edition
Medium6.9
CVE-2026-109205
LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServletLogicalDOC · LogicalDOC Community Edition
High8.7
CVE-2026-109204
LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery TicketLogicalDOC · LogicalDOC Community Edition
Medium5.3
CVE-2026-109203
LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf ServletLogicalDOC · LogicalDOC Community Edition
High7.1
CVE-2026-109202
LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export ServletLogicalDOC · LogicalDOC Community Edition
High7.1
CVE-2026-109201
LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentServiceLogicalDOC · LogicalDOC Community Edition
High8.7
CVE-2026-109200
LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet hrefLogicalDOC · LogicalDOC Community Edition
Medium5.3
CVE-2026-109199
LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail TemplateLogicalDOC · LogicalDOC Community Edition
High8.7
CVE-2026-109170
LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed ParameterLogicalDOC · LogicalDOC Community Edition
High7.1
CVE-2026-109169
LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetterLogicalDOC · LogicalDOC Community Edition
High7.1
CVE-2025-12547
LogicalDOC Community Edition Admin Login login.jsp excessive authenticationLogicalDOC · Community Edition
Medium6.3
CVE-2025-12546
LogicalDOC Community Edition API Key creation UI cross site scriptingLogicalDOC · Community Edition
Medium5.1
CVE-2025-11946
LogicalDOC Community Edition Add Contact frontend.jsp cross site scriptingLogicalDOC · Community Edition
Medium5.1
CVE-2024-12245
Blind SQL Injection in LogoutLogicalDOC · LogicalDOC Community
High8.7
CVE-2024-12020
Reflected Cross-Site Scripting (XSS)LogicalDOC · LogicalDOC Enterprise
Medium6.4
CVE-2024-12019
Arbitrary File Read via Document APILogicalDOC · LogicalDOC Community
High7.1
CVE-2024-54449
Remote Code Execution (RCE) via Arbitrary File Write In Document APILogicalDOC · LogicalDOC Community
High8.7
CVE-2024-54448
Remote Code Execution (RCE) via Automation ScriptingLogicalDOC · LogicalDOC Community
High8.6
CVE-2024-54447
Blind SQLi in Saved SearchLogicalDOC · LogicalDOC Community
High7.1
CVE-2024-54446
Blind SQLi in Document HistoryLogicalDOC · LogicalDOC Community
High7.1
CVE-2024-54445
Blind SQLi in LoginLogicalDOC · LogicalDOC Community
High8.7
CVE-2022-47418
LogicalDOC Document Version Comment Stored XSSLogicalDOC · LogicalDOC Enterprise
Medium5.4
CVE-2022-47417
LogicalDOC Document File Name Stored XSSLogicalDOC · LogicalDOC Enterprise
Medium5.4
CVE-2022-47416
LogicalDOC Chat Stored XSSLogicalDOC · LogicalDOC Enterprise
Medium5.4
CVE-2022-47415
LogicalDOC Messaging Stored XSSLogicalDOC · LogicalDOC Enterprise
Medium5.4