Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,074All CVEsplus 19,119 rejected
- 506Last 24 hours2,863 in the last 7 days
- 16,887Last 30 days1,546 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 14 |
| 2025 | 1 | 4 | 9 | 0 | 0 | 14 | 14 |
| Title | ||
|---|---|---|
| CVE-2025-35061 | Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmxNewforma · Project Center | High8.2 |
| CVE-2025-35062 | Newforma Info Exchange (NIX) default anonymous accessNewforma · Project Center | Medium6.9 |
| CVE-2025-35060 | Newforma Info Exchange (NIX) stored XSS via SVG file uploadNewforma · Project Center | Medium5.1 |
| CVE-2025-35059 | Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspxNewforma · Project Center | Medium5.3 |
| CVE-2025-35058 | Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashxNewforma · Project Center | High8.2 |
| CVE-2025-35057 | Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashxNewforma · Project Center | Medium6.0 |
| CVE-2025-35056 | Newforma Info Exchange (NIX) limited file readNewforma · Project Center | Medium5.3 |
| CVE-2025-35055 | Newforma Info Exchange (NIX) insecure file uploadNewforma · Project Center | High8.7 |
| CVE-2025-35054 | Newforma Info Exchange (NIX) insufficiently protected credentialsNewforma · Project Center | Medium4.8 |
| CVE-2025-35053 | Newforma Info Exchange (NIX) arbitrary file read and deleteNewforma · Project Center | Medium6.1 |
| CVE-2025-35052 | Newforma Info Exchange (NIX) shared hard-coded secret keyNewforma · Project Center | Medium6.3 |
| CVE-2025-35051 | Newforma Project Center Server (NPCS) .NET unauthenticated deserializationNewforma · Project Center | High7.7 |
| CVE-2025-35050 | Newforma Info Exchange (NIX) .NET unauthenticated deserializationNewforma · Project Center | Critical9.3 |
| CVE-2024-32499 | Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed.Newforma · Project Center Server | Medium4.9 |