Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,115All CVEsplus 18,875 rejected
- 772Last 24 hours3,230 in the last 7 days
- 17,386Last 30 days1,568 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 16 | 17 | 2 | 1 | 38 | 57 |
| 2025 | 2 | 7 | 2 | 3 | 0 | 14 | 19 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2022 | 0 | 0 | 3 | 0 | 0 | 3 | 5 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2019 | 1 | 0 | 0 | 0 | 0 | 1 | 2 |
| 2018 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-92160 | F´: SendPartial Integer Overflow Leading to Assertion DoSnasa · fprime | Medium6.5 |
| CVE-2026-92155 | F´: FileUplink Unknown Packet Type Assertion DoSnasa · fprime | High7.5 |
| CVE-2026-92150 | F´: GenericHub Malformed Buffer Assertion DoSnasa · fprime | High7.5 |
| CVE-2026-92154 | F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validationnasa · fprime | High8.1 |
| CVE-2026-92158 | F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Writenasa · fprime | High7.2 |
| CVE-2026-92159 | F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetrynasa · fprime | Medium6.5 |
| CVE-2026-92156 | F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridgenasa · fprime | Medium6.5 |
| CVE-2026-92157 | F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertionnasa · fprime | Medium6.5 |
| CVE-2026-92152 | F´: Unvalidated Port Index in GenericHubnasa · fprime | Critical9.3 |
| CVE-2026-92153 | F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPathnasa · fprime | High7.1 |
| CVE-2026-92151 | F´: SpacePacketDeframer Small Packet Assertion DoSnasa · fprime | High7.5 |
| CVE-2026-105164 | NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-boundsNASA · cFS | Medium5.1 |
| CVE-2026-79954 | NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCIDNASA · CryptoLib | High8.7 |
| CVE-2026-82802 | NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgeryNASA · earthdata-search | Medium6.9 |
| CVE-2026-82801 | NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgeryNASA · earthdata-search | Medium6.9 |
| CVE-2026-82480 | NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflowNASA · cFS | Medium5.3 |
| CVE-2026-82479 | NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflowNASA · cFS | Medium5.3 |
| CVE-2026-82478 | NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflowNASA · Trick | Medium6.9 |
| CVE-2026-72579 | NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data ServerNASA · HyperCP | High7.5 |
| CVE-2026-72577 | NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command InjectionNASA · fprime-gds | Critical9.8 |
| CVE-2026-18064 | NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer DereferenceNASA · Core Flight System (cFS) Health & Safety (HS) Application | High8.2 |
| CVE-2026-15352 | NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer DereferenceNASA · Core Flight System (cFS) Health & Safety (HS) Application | High8.2 |
| CVE-2018-25367 | NASA openVSP 3.16.1 Denial of Service via Buffer OverflowNASA · openVSP | Medium6.9 |
| CVE-2026-41144 | F´ (F Prime) has Integer Overflow in FileUplinknasa · fprime | None0.0 |
| CVE-2026-5476 | NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflowNASA · cFS | Low2.1 |
| CVE-2026-5475 | NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruptionNASA · cFS | Medium5.1 |
| CVE-2026-5474 | NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflowNASA · cFS | Medium5.3 |
| CVE-2026-5473 | NASA cFS Pickle pickle.load deserializationNASA · cFS | Low2.0 |
| CVE-2026-22697 | CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext)nasa · CryptoLib | High7.5 |
| CVE-2026-22027 | CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversionnasa · CryptoLib | Medium5.7 |
| CVE-2026-22026 | CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustionnasa · CryptoLib | High8.2 |
| CVE-2026-22025 | CryptoLib Memory Leak on HTTP Error Response in KMC Clientnasa · CryptoLib | Medium6.3 |
| CVE-2026-22024 | CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustionnasa · CryptoLib | Medium6.3 |
| CVE-2026-22023 | CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Patternnasa · CryptoLib | High8.2 |
| CVE-2026-21900 | CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Patternnasa · CryptoLib | High8.2 |
| CVE-2026-21899 | CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url stringnasa · CryptoLib | Medium4.7 |
| CVE-2026-21898 | CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecuritynasa · CryptoLib | High8.2 |
| CVE-2026-21897 | CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parametersnasa · CryptoLib | High7.3 |
| CVE-2025-64096 | CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length checknasa · CryptoLib | High8.8 |
| CVE-2025-59534 | CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()nasa · CryptoLib | High7.3 |
| CVE-2025-54878 | Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`nasa · CryptoLib | High8.6 |
| CVE-2025-46675 | In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.NASA · CryptoLib | Low3.5 |
| CVE-2025-46674 | NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream…NASA · CryptoLib | Low3.5 |
| CVE-2025-46673 | NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security…NASA · CryptoLib | Medium4.9 |
| CVE-2025-46672 | NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.NASA · CryptoLib | Low3.5 |
| CVE-2025-30356 | Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`nasa · CryptoLib | Critical9.3 |
| CVE-2025-30216 | CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Lengthnasa · CryptoLib | Critical9.4 |
| CVE-2025-29913 | CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflownasa · CryptoLib | High8.9 |
| CVE-2025-29912 | CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecuritynasa · CryptoLib | High8.9 |
| CVE-2025-29911 | CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Functionnasa · CryptoLib | High8.9 |