Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,676All CVEsplus 19,114 rejected
- 399Last 24 hours2,823 in the last 7 days
- 17,126Last 30 days1,580 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 2 | 0 | 0 | 5 | 86 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 81 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 80 |
| 2023 | 0 | 3 | 12 | 2 | 0 | 17 | 80 |
| 2022 | 5 | 20 | 37 | 1 | 0 | 63 | 63 |
| Title | ||
|---|---|---|
| CVE-2026-5696 | Multiple vulnerabilities in the Microweber administration panelMicroweber · Administration panel | Medium5.9 |
| CVE-2026-5695 | Multiple vulnerabilities in the Microweber administration panelMicroweber · Administration panel | High8.4 |
| CVE-2026-67617 | Microweber CMS 2.0.20 Stored XSS via tag_names Parametermicroweber · microweber | Medium4.8 |
| CVE-2026-65693 | Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templatesmicroweber · microweber | High8.6 |
| CVE-2026-65694 | Microweber CMS 2.0.20 Path Traversal via ServeStaticFileControllermicroweber · microweber | High8.7 |
| CVE-2024-58289 | Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fieldsmicroweber · Microweber | Medium5.3 |
| CVE-2023-6832 | Business Logic Errors in microweber/microwebermicroweber · microweber/microweber | Medium6.0 |
| CVE-2023-6599 | Missing Standardized Error Handling Mechanism in microweber/microwebermicroweber · microweber/microweber | Low3.1 |
| CVE-2023-6566 | Business Logic Errors in microweber/microwebermicroweber · microweber/microweber | Medium5.9 |
| CVE-2023-5976 | Improper Access Control in microweber/microwebermicroweber · microweber/microweber | Medium4.6 |
| CVE-2023-5861 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | Medium6.4 |
| CVE-2023-5318 | Use of Hard-coded Credentials in microweber/microwebermicroweber · microweber/microweber | Medium5.8 |
| CVE-2023-5244 | Cross-site Scripting (XSS) - Reflected in microweber/microwebermicroweber · microweber/microweber | Medium5.0 |
| CVE-2023-3142 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | Low3.8 |
| CVE-2023-2240 | Improper Privilege Management in microweber/microwebermicroweber · microweber/microweber | High8.8 |
| CVE-2023-2239 | Exposure of Private Personal Information to an Unauthorized Actor in microweber/microwebermicroweber · microweber/microweber | High7.1 |
| CVE-2023-2014 | Cross-site Scripting (XSS) - Generic in microweber/microwebermicroweber · microweber/microweber | Medium5.3 |
| CVE-2023-1881 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | High7.4 |
| CVE-2023-1877 | Command Injection in microweber/microwebermicroweber · microweber/microweber | Medium6.1 |
| CVE-2023-1081 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | Medium5.7 |
| CVE-2021-32857 | Cockpit vulnerable to Cross-site Scriptingmicroweber · microweber | Medium6.1 |
| CVE-2021-32856 | Microweber vulnerable to Cross-site Scriptingmicroweber · microweber | Medium6.1 |
| CVE-2023-0608 | Cross-site Scripting (XSS) - DOM in microweber/microwebermicroweber · microweber/microweber | Medium6.3 |
| CVE-2022-4732 | Unrestricted Upload of File with Dangerous Type in microweber/microwebermicroweber · microweber/microweber | Medium4.7 |
| CVE-2022-4647 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | Medium5.1 |
| CVE-2022-4617 | Cross-site Scripting (XSS) - Reflected in microweber/microwebermicroweber · microweber/microweber | Low2.7 |
| CVE-2022-3245 | Code Injection in display of tag title on saving tags in microweber/microwebermicroweber · microweber/microweber | Medium4.3 |
| CVE-2022-3242 | HTML code Injection in template search keyword in microweber/microwebermicroweber · microweber/microweber | Medium4.3 |
| CVE-2022-2777 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | Medium6.6 |
| CVE-2022-2470 | Cross-site Scripting (XSS) - Reflected in microweber/microwebermicroweber · microweber/microweber | Medium6.5 |
| CVE-2022-2495 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | Medium6.8 |
| CVE-2022-2368 | Authentication Bypass by Spoofing in microweber/microwebermicroweber · microweber/microweber | Medium6.5 |
| CVE-2022-2353 | Cross-Site Request Forgery (CSRF) in microweber/microwebermicroweber · microweber/microweber | Medium6.3 |
| CVE-2022-2300 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | Medium6.3 |
| CVE-2022-2280 | Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber · microweber/microweber | Medium6.5 |
| CVE-2022-2252 | Open Redirect in microweber/microwebermicroweber · microweber/microweber | Medium4.3 |
| CVE-2022-2174 | Cross-site Scripting (XSS) - Reflected in microweber/microwebermicroweber · microweber/microweber | Medium6.5 |
| CVE-2022-2130 | Cross-site Scripting (XSS) - Reflected in microweber/microwebermicroweber · microweber/microweber | Medium6.5 |
| CVE-2022-1631 | Users Account Pre-Takeover or Users Account Takeover. in microweber/microwebermicroweber · microweber/microweber | Medium6.8 |
| CVE-2022-1584 | Reflected XSS in microweber/microwebermicroweber · microweber/microweber | Medium6.3 |
| CVE-2022-1555 | DOM XSS in microweber ver 1.2.15 in microweber/microwebermicroweber · microweber/microweber | High8.8 |
| CVE-2022-1504 | XSS in /demo/module/?module=HERE in microweber/microwebermicroweber · microweber/microweber | Medium6.3 |
| CVE-2022-1439 | Reflected XSS on demo.microweber.org/demo/module/ in microweber/microwebermicroweber · microweber/microweber | Medium6.3 |
| CVE-2022-1036 | Able to create an account with long password leads to memory corruption / Integer Overflow in microweber/microwebermicroweber · microweber/microweber | Medium5.3 |
| CVE-2022-0968 | The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microwebermicroweber · microweber/microweber | High7.2 |
| CVE-2022-0963 | Unrestricted XML Files Leads to Stored XSS in microweber/microwebermicroweber · microweber/microweber | Medium5.7 |
| CVE-2022-0961 | The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microwebermicroweber · microweber/microweber | High7.1 |
| CVE-2022-0954 | Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microwebermicroweber · microweber/microweber | Medium6.8 |
| CVE-2022-0930 | File upload filter bypass leading to stored XSS in microweber/microwebermicroweber · microweber/microweber | High8.0 |
| CVE-2022-0929 | XSS on dynamic_text module in microweber/microwebermicroweber · microweber/microweber | Medium6.8 |