Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,108All CVEsplus 18,873 rejected
- 789Last 24 hours3,271 in the last 7 days
- 17,395Last 30 days1,568 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 3 | 6 | 2 | 0 | 12 | 74 |
| 2025 | 1 | 3 | 3 | 0 | 0 | 7 | 62 |
| 2024 | 0 | 2 | 9 | 0 | 0 | 11 | 55 |
| 2023 | 0 | 3 | 4 | 0 | 0 | 7 | 44 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 37 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 37 |
| 2020 | 1 | 2 | 2 | 0 | 0 | 5 | 37 |
| 2019 | 2 | 9 | 5 | 0 | 0 | 16 | 32 |
| 2018 | 4 | 5 | 3 | 0 | 0 | 12 | 16 |
| 2017 | 0 | 2 | 2 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-22060 | CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)NETAPP · StorageGRID (formerly StorageGRID Webscale) | Medium6.9 |
| CVE-2026-22058 | CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)NETAPP · StorageGRID (formerly StorageGRID Webscale) | Critical9.1 |
| CVE-2026-22063 | CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp ProductsNetApp · ONTAP 9 | Medium6.0 |
| CVE-2026-22061 | CVE-2026-22061 Debug Log Information Disclosure Vulnerability in TridentNetApp · Trident | High8.2 |
| CVE-2026-22056 | CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID | Low2.3 |
| CVE-2026-22049 | ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID…NETAPP · ONTAP 9 | High8.7 |
| CVE-2026-22055 | Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…NETAPP · Active IQ OneCollect | Medium5.3 |
| CVE-2026-22054 | Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized…NETAPP · Active IQ Config Advisor | Medium5.3 |
| CVE-2026-22051 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful…NETAPP · StorageGRID (formerly StorageGRID Webscale) | Low2.3 |
| CVE-2026-22052 | ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an…NETAPP · ONTAP 9 | Medium5.3 |
| CVE-2026-22048 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and configured to use Microsoft Entra ID…NETAPP · StorageGRID (formerly StorageGRID Webscale) | High7.1 |
| CVE-2026-22050 | ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a…NETAPP · ONTAP 9 | Medium6.9 |
| CVE-2025-26517 | CVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID | Medium5.4 |
| CVE-2025-26516 | CVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID | Medium5.3 |
| CVE-2025-26515 | CVE-2025-26515 Server-Side Request Forgery Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID | High7.5 |
| CVE-2025-26514 | CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID | Medium6.4 |
| CVE-2025-26513 | The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local…NetApp · SAN Host Utilities for Windows | High7.0 |
| CVE-2025-26512 | CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenterNetApp · SnapCenter | Critical9.9 |
| CVE-2025-26511 | Cassandra-Lucene-Index allows bypass of Cassandra RBACNetApp · Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin | High8.8 |
| CVE-2024-21994 | CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID | Medium4.3 |
| CVE-2024-21993 | Information Disclosure Vulnerability in SnapCenterNetApp · SnapCenter | Medium5.7 |
| CVE-2024-21988 | CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID (formerly StorageGRID Webscale) | Medium5.3 |
| CVE-2024-21990 | Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utilityNetApp · ONTAP Select Deploy administration utility | Medium5.4 |
| CVE-2024-21989 | Privilege Escalation Vulnerability in ONTAP Select Deploy administration utilityNetApp · ONTAP Select Deploy administration utility | High8.1 |
| CVE-2024-21984 | Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID | Medium5.9 |
| CVE-2024-21983 | Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID | Medium6.5 |
| CVE-2024-21987 | Improper Authorization Vulnerability in SnapCenterNetApp · SnapCenter | Medium5.4 |
| CVE-2023-27318 | Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)NetApp · StorageGRID (formerly StorageGRID Webscale) | Medium6.5 |
| CVE-2024-21985 | Privilege Escalation Vulnerability in ONTAP 9NetApp · ONTAP 9 | High7.6 |
| CVE-2024-21982 | CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9NetApp · ONTAP 9 | Medium4.8 |
| CVE-2023-27319 | CVE-2023-27319 Information Disclosure Vulnerability in ONTAP MediatorNetApp · ONTAP Mediator | Medium5.3 |
| CVE-2023-27317 | Information Disclosure Vulnerability in ONTAP 9NetApp · ONTAP 9 | Medium4.3 |
| CVE-2023-27316 | Privilege Escalation Vulnerability in SnapCenterNetApp · SnapCenter | High8.8 |
| CVE-2023-27314 | Denial of Service Vulnerability in ONTAP 9NetApp · ONTAP 9 | High7.5 |
| CVE-2023-27313 | Privilege Escalation Vulnerability in SnapCenterNetApp · SnapCenter | High8.3 |
| CVE-2023-27312 | Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphereNetApp · SnapCenter Plugin for VMware vSphere | Medium5.4 |
| CVE-2023-27315 | Information Disclosure Vulnerability in SnapGathersNetApp · SnapGathers | Medium6.5 |
| CVE-2020-8573 | The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that should be changed…NetApp · NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, NetApp HCI Baseboard Management Controller (BMC) HCI H610S | Medium6.5 |
| CVE-2020-8571 | StorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11.3 prior to 11.2.0.8 and 11.3.0.4 are susceptible to a vulnerability which allows an…NetApp · StorageGRID (formerly StorageGRID Webscale) | High7.5 |
| CVE-2019-17275 | OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.NetApp · OnCommand Cloud Manager | Critical9.8 |
| CVE-2019-17274 | NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that…NetApp · NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller | High7.8 |
| CVE-2019-17273 | E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a Denial of Service (DoS) in…NetApp · E-Series SANtricity OS Controller Software | Medium6.5 |
| CVE-2019-17272 | All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative…NetApp · ONTAP Select Deploy administration utility | High7.2 |
| CVE-2019-5509 | ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited…NetApp · ONTAP Select Deploy administration utility | Critical9.8 |
| CVE-2019-5503 | OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive…NetApp · OnCommand Workflow Automation | Medium5.3 |
| CVE-2019-5501 | Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers.NetApp · Data ONTAP operating in 7-Mode | High7.5 |
| CVE-2019-5493 | Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information to an unauthenticated attacker. A…Netapp · Data ONTAP operating in 7-Mode | High7.5 |
| CVE-2019-5497 | NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow…NetApp · AFF A700s Baseboard Management Controller | Critical9.8 |
| CVE-2019-5496 | Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive…NetApp · OnCommand Insight | High7.5 |
| CVE-2019-5495 | OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an…NetApp · OnCommand Unified Manager for VMware vSphere,Linux and Windows 7.2 and above | High7.5 |