Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,933All CVEsplus 19,141 rejected
- 574Last 24 hours3,196 in the last 7 days
- 17,028Last 30 days1,579 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 2 | 17 | 3 | 0 | 24 | 36 |
| 2025 | 0 | 2 | 4 | 0 | 0 | 6 | 12 |
| 2024 | 0 | 0 | 2 | 0 | 0 | 2 | 6 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 4 |
| 2022 | 0 | 2 | 0 | 0 | 0 | 2 | 3 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-45118 | MyBB: Contact page reflected XSSmybb · mybb | Critical9.3 |
| CVE-2026-45117 | MyBB: Installer database configuration RCEmybb · mybb | Critical9.8 |
| CVE-2026-45129 | MyBB: ACP Recovery Codes CSRFmybb · mybb | Medium4.6 |
| CVE-2026-45124 | MyBB: Mod CP report resolution missing authorizationmybb · mybb | Medium4.3 |
| CVE-2026-45120 | MyBB: Insufficient authorization for private calendar eventsmybb · mybb | Medium5.4 |
| CVE-2026-47245 | MyBB: Buddy list corruptionmybb · mybb | Medium4.3 |
| CVE-2026-45734 | MyBB: Default CAPTCHA missing invalidationmybb · mybb | Medium5.3 |
| CVE-2026-45125 | MyBB: Email User CRLF injectionmybb · mybb | Medium5.3 |
| CVE-2026-45122 | MyBB: Insufficient permission check for calendar event movemybb · mybb | Medium4.3 |
| CVE-2026-45119 | MyBB: ACP UTF-8 Conversion CSRFmybb · mybb | Medium4.6 |
| CVE-2026-45126 | MyBB: ACP Questions state CSRFmybb · mybb | Low3.5 |
| CVE-2026-45116 | MyBB: Profile field type confusion XSSmybb · mybb | High8.7 |
| CVE-2026-45115 | MyBB: Buddy/ignore list username XSSmybb · mybb | High8.7 |
| CVE-2026-45121 | MyBB: Insufficient permission check for calendar selectmybb · mybb | Medium4.3 |
| CVE-2026-46482 | MyBB: Security Question insufficient validationmybb · mybb | Medium5.3 |
| CVE-2026-45123 | MyBB: IPv6 SSRFmybb · mybb | Medium4.3 |
| CVE-2026-45128 | MyBB: ACP Users View Manager default CSRFmybb · mybb | Low3.5 |
| CVE-2026-45127 | MyBB: ACP Mass Mail draft resend CSRFmybb · mybb | Low3.5 |
| CVE-2021-47934 | MyBB Timeline Plugin 1.0 Cross-Site Scripting and CSRFPublic exploitMyBB · MyBB Timeline Plugin | Medium6.9 |
| CVE-2018-25309 | MyBB Recent threads 17.0 Persistent Cross-Site ScriptingPublic exploitmybb · MyBB Recent threads | Medium5.1 |
| CVE-2018-25250 | MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSSPublic exploitMyBB · MyBB Last User's Threads in Profile Plugin | Medium5.1 |
| CVE-2018-25249 | MyBB My Arcade Plugin 1.3 Persistent XSS via CommentPublic exploitMyBB · MyBB My Arcade Plugin | Medium5.1 |
| CVE-2018-25248 | MyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.phpPublic exploitMyBB · MyBB Downloads Plugin | Medium5.1 |
| CVE-2018-25247 | MyBB Like Plugin 3.0.0 Cross-Site Scripting via User ProfilesPublic exploitMyBB · MyBB Like Plugin | Medium5.1 |
| CVE-2023-53979 | MyBB 1.8.32 Authenticated Remote Code Execution via Chained VulnerabilitiesPublic exploitMybb · MyBB | High8.6 |
| CVE-2023-53978 | myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum AnnouncementsPublic exploitMybb · myBB forums | Medium5.1 |
| CVE-2023-53977 | myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum ManagementPublic exploitMybb · myBB forums | Medium5.1 |
| CVE-2023-53976 | myBB Forums 1.8.26 Stored Cross-Site Scripting via Template ManagementPublic exploitMybb · myBB forums | Medium5.1 |
| CVE-2025-48941 | MyBB may disclosure unviewable threads' titles in searchesmybb · mybb | Medium5.3 |
| CVE-2025-48940 | MyBB's upgrade component vulnerable to local file inclusionmybb · mybb | High7.2 |
| CVE-2024-23335 | Backups directory .htaccess deletion in. MyBBmybb · mybb | Medium4.7 |
| CVE-2024-23336 | Incomplete disallowed remote addresses list in MyBBmybb · mybb | Medium5.0 |
| CVE-2023-46251 | Visual editor persistent Cross-site Scripting (XSS) in MyBBmybb · mybb | High7.5 |
| CVE-2022-39265 | Mail settings' command parameter injection in mybbPublic exploitmybb · mybb | High7.2 |
| CVE-2022-24734 | Remote code execution in mybbPublic exploitmybb · mybb | High7.2 |
| CVE-2020-15139 | XSS in MyBBMyBB · MyBB | High8.8 |