Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,974All CVEsplus 19,118 rejected
- 407Last 24 hours2,833 in the last 7 days
- 16,799Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 4 | 1 | 0 | 6 | 20 |
| 2025 | 0 | 3 | 4 | 1 | 0 | 8 | 14 |
| 2024 | 0 | 4 | 2 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-68923 | MobSF: CSRF checks not enforced after Django migrationMobSF · Mobile-Security-Framework-MobSF | Medium6.5 |
| CVE-2026-68927 | MobSF: SSRF port restriction bypass in assetlinks_checkMobSF · Mobile-Security-Framework-MobSF | Low3.0 |
| CVE-2026-68922 | MobSF: Arbitrary File Read via Path Traversal in ZIP UploadsMobSF · Mobile-Security-Framework-MobSF | Medium5.5 |
| CVE-2026-68924 | MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK ExtractionMobSF · Mobile-Security-Framework-MobSF | Medium4.9 |
| CVE-2026-33545 | MobSF has SQL Injection in its SQLite Database Viewer UtilsMobSF · Mobile-Security-Framework-MobSF | Medium5.3 |
| CVE-2026-24490 | MobSF has Stored XSS via Manifest Analysis - Dialer Code Host FieldMobSF · Mobile-Security-Framework-MobSF | High8.1 |
| CVE-2025-58162 | MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a ExtractionMobSF · Mobile-Security-Framework-MobSF | Medium6.5 |
| CVE-2025-58161 | MobSF Path Traversal in GET /download/<filename> using absolute filenamesMobSF · Mobile-Security-Framework-MobSF | Low1.3 |
| CVE-2025-46730 | Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death AttackMobSF · Mobile-Security-Framework-MobSF | Medium6.8 |
| CVE-2025-46335 | Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon UploadMobSF · Mobile-Security-Framework-MobSF | High8.6 |
| CVE-2025-31116 | Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS RebindingMobSF · Mobile-Security-Framework-MobSF | Medium4.4 |
| CVE-2025-24803 | Stored Cross-Site Scripting (XSS) in MobSFMobSF · Mobile-Security-Framework-MobSF | High8.4 |
| CVE-2025-24804 | Partial Denial of Service (DoS) in MobSFMobSF · Mobile-Security-Framework-MobSF | Medium4.8 |
| CVE-2025-24805 | Local Privilege Escalation in MobSFMobSF · Mobile-Security-Framework-MobSF | High8.5 |
| CVE-2024-53999 | Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" FunctionalityMobSF · Mobile-Security-Framework-MobSF | High8.1 |
| CVE-2024-54000 | Mobile Security Framework (MobSF) bypass of SSRF fixMobSF · Mobile-Security-Framework-MobSF | High7.5 |
| CVE-2024-43399 | Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library FilesMobSF · Mobile-Security-Framework-MobSF | High8.0 |
| CVE-2024-41955 | Mobile Security Framework (MobSF) has an Open Redirect in Login RedirectMobSF · Mobile-Security-Framework-MobSF | Medium5.2 |
| CVE-2024-31215 | Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database checkMobSF · Mobile-Security-Framework-MobSF | Medium6.3 |
| CVE-2024-29190 | MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns)MobSF · Mobile-Security-Framework-MobSF | High7.5 |