Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,878All CVEsplus 19,117 rejected
- 445Last 24 hours2,934 in the last 7 days
- 16,821Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 0 | 0 | 0 | 5 | 24 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 19 |
| 2024 | 2 | 10 | 1 | 0 | 0 | 13 | 19 |
| 2023 | 2 | 2 | 2 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-92207 | MindsDB OpenBBtable Code Injection Remote Code Execution VulnerabilityMindsDB · MindsDB | High8.8 |
| CVE-2026-86173 | MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawlermindsdb · mindsdb | High8.7 |
| CVE-2026-73678 | MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()MindsDB · Minds Platform | Critical10.0 |
| CVE-2026-27483 | MindsDB has Path Traversal in /api/files Leading to Remote Code Executionmindsdb · mindsdb | High8.8 |
| CVE-2025-68472 | MindsDB has improper sanitation of filepath that leads to information disclosure and DOSmindsdb · mindsdb | High8.1 |
| CVE-2024-45856 | A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a JavaScript payload whenever a user…mindsdb · mindsdb | Critical9.0 |
| CVE-2024-45855 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run…mindsdb · mindsdb | High7.1 |
| CVE-2024-45854 | Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run…mindsdb · mindsdb | High7.1 |
| CVE-2024-45853 | Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run…mindsdb · mindsdb | High7.1 |
| CVE-2024-45852 | Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code…mindsdb · mindsdb | High8.8 |
| CVE-2024-45851 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is…mindsdb · mindsdb | High8.8 |
| CVE-2024-45850 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is…mindsdb · mindsdb | High8.8 |
| CVE-2024-45849 | An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is…mindsdb · mindsdb | High8.8 |
| CVE-2024-45848 | An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on…mindsdb · mindsdb | High8.8 |
| CVE-2024-45847 | An arbitrary code execution vulnerability exists in versions 23.11.4.2 up to 24.7.4.1 of the MindsDB platform, when one of several integrations is installed on…mindsdb · mindsdb | High8.8 |
| CVE-2024-45846 | An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on…mindsdb · mindsdb | High8.8 |
| CVE-2024-24759 | MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebindingmindsdb · mindsdb | Critical9.3 |
| CVE-2024-3575 | Cross-site Scripting (XSS) - Stored in mindsdb/mindsdbmindsdb · mindsdb/mindsdb | Medium5.8 |
| CVE-2023-50731 | MindsDB has arbitrary file write in file.pymindsdb · mindsdb | Critical9.1 |
| CVE-2023-49796 | MindsDB Arbitrary File Write vulnerabilitymindsdb · mindsdb | Medium5.3 |
| CVE-2023-49795 | MindsDB Server-Side Request Forgery vulnerabilitymindsdb · mindsdb | Medium6.5 |
| CVE-2023-38699 | MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issuemindsdb · mindsdb | Critical9.1 |
| CVE-2023-30620 | Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdbmindsdb · mindsdb | High7.5 |
| CVE-2022-23522 | Arbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdbmindsdb · mindsdb | High8.5 |