Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,270All CVEsplus 19,138 rejected
- 475Last 24 hours2,765 in the last 7 days
- 16,926Last 30 days1,555 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 3 | 2 | 5 | 0 | 11 | 15 |
| 2025 | 0 | 1 | 1 | 0 | 0 | 2 | 4 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 2 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-92681 | @neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fieldsNeo4j · @neo4j/graphql | Critical9.3 |
| CVE-2026-92682 | @neo4j/graphql: authorization relationship and connection filters invert the "none" quantifierNeo4j · @neo4j/graphql | High8.6 |
| CVE-2026-19869 | Privilege Escalation via Dropped Field-Level @authenticationneo4j · graphql | High7.6 |
| CVE-2026-5423 | Subscription Authentication Bypass via Unverified connectionParams.jwtneo4j · graphql | High8.2 |
| CVE-2026-14587 | Unathenticated connection can hold Bolt channel openneo4j · Enterprise Edition | Medium5.5 |
| CVE-2026-1471 | Caching of authentication contextNeo4j · Enterprise edition | Low2.1 |
| CVE-2026-1524 | Auth misconfiguration when multiple providers enabledneo4j · Enterprise Edition | Low2.1 |
| CVE-2026-1497 | Incorrect privilege assignment in composite databasesneo4j · Enterprise Edition | Low2.0 |
| CVE-2026-1337 | Insufficient escaping of unicode characters in query logneo4j · Enterprise Edition | Low1.1 |
| CVE-2026-1622 | Unredacted data exposure in query.logneo4j · Enterprise Edition | Medium4.8 |
| CVE-2025-12738 | Enumeration of restricted property valueneo4j · Enterprise Edition | Low1.3 |
| CVE-2025-11602 | Untargeted information leak in Bolt protocol handshakeneo4j · Enterprise Edition | Medium6.3 |
| CVE-2025-10193 | Neo4j Cypher MCP server is vulnerable to DNS rebinding attacksneo4j · neo4j-cypher MCP server | High7.4 |
| CVE-2024-34517 | The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access.Neo4j · Neo4j | Medium6.5 |
| CVE-2023-23926 | APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j. An XML External Entity (XXE) vulnerability found in the apoc.import.graphml procedure of…neo4j · apoc | Medium5.9 |