Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,451All CVEsplus 18,890 rejected
- 365Last 24 hours2,971 in the last 7 days
- 17,371Last 30 days1,592 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 11 | 12 | 0 | 0 | 27 | 36 |
| 2025 | 0 | 1 | 4 | 0 | 0 | 5 | 9 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2022 | 0 | 4 | 0 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-86047 | MariaDB: Insufficient quoting in mariadb-dump and SHOW commandsMariaDB · server | High7.7 |
| CVE-2026-85745 | MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.MariaDB · server | Medium4.3 |
| CVE-2026-85748 | MariaDB: Use-after-free with a large number of SYS_REFCURSOR'sMariaDB · server | Critical9.9 |
| CVE-2026-85746 | MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsMariaDB · server | Critical9.9 |
| CVE-2026-92262 | MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.MariaDB · server | Critical9.9 |
| CVE-2026-97380 | MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privilegesMariaDB · server | High8.8 |
| CVE-2026-85985 | MariaDB: Unauthorized file access via CONNECT engine UDFsMariaDB · server | Medium5.4 |
| CVE-2026-107823 | MariaDB: privilege escalation via incorrect view frm parsingMariaDB · server | High7.2 |
| CVE-2026-107822 | MariaDB: database privilege escalation via user / role name collision in the acl cacheMariaDB · server | Medium6.4 |
| CVE-2026-107821 | MariaDB: insufficient validation of binary frm data when opening a tableMariaDB · server | High8.0 |
| CVE-2026-107819 | MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failureMariaDB · server | Medium5.9 |
| CVE-2026-107818 | MariaDB: environment injection via wsrep bootstrap in the mariadb.service fileMariaDB · server | High8.4 |
| CVE-2026-107817 | MariaDB: mysql_json plugin OOB readsMariaDB · server | Medium4.4 |
| CVE-2026-107816 | MariaDB: `qc_info` plugin can do OOB reads if query contains \0MariaDB · server | Medium6.4 |
| CVE-2026-107815 | MariaDB: one byte OOB write in DOS tables of the CONNECT engineMariaDB · server | High8.5 |
| CVE-2026-107814 | MariaDB: Insecure $HOME in MariaDB rpm packagesMariaDB · server | High8.4 |
| CVE-2026-48165 | MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner sideMariaDB · server | High8.0 |
| CVE-2026-48163 | MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)MariaDB · server | High8.0 |
| CVE-2026-44173 | MariaDB: FILE privilege was not checked for subqueries in the FROM clauseMariaDB · server | Medium5.0 |
| CVE-2026-44172 | MariaDB: mysql_real_escape_string() incorrectly handled big5MariaDB · server | Medium6.9 |
| CVE-2026-44171 | MariaDB: path traversal in mbstreamMariaDB · server | Medium6.3 |
| CVE-2026-44169 | MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitionsMariaDB · server | Medium4.3 |
| CVE-2026-44168 | MariaDB: wsrep SST unsafe parameter handling on the donor sideMariaDB · server | High8.0 |
| CVE-2026-44170 | MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLMariaDB · server | Medium6.3 |
| CVE-2026-49261 | MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`MariaDB · server | Critical10.0 |
| CVE-2026-35549 | An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password…MariaDB · MariaDB | Medium6.5 |
| CVE-2026-32710 | Heap-based Buffer Overflow in MariaDBMariaDB · server | High8.6 |
| CVE-2025-13699 | MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution VulnerabilityMariaDB · MariaDB | High7.0 |
| CVE-2023-52971 | MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.MariaDB · MariaDB | Medium4.9 |
| CVE-2023-52970 | MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in…MariaDB · MariaDB | Medium4.9 |
| CVE-2023-52969 | MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This…MariaDB · MariaDB | Medium4.9 |
| CVE-2023-52968 | MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4…MariaDB · MariaDB | Medium4.9 |
| CVE-2022-24052 | MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges…MariaDB · MariaDB | High7.0 |
| CVE-2022-24051 | MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected…MariaDB · MariaDB | High7.0 |
| CVE-2022-24050 | MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected…MariaDB · MariaDB | High7.0 |
| CVE-2022-24048 | MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges…MariaDB · MariaDB | High7.0 |