Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,200All CVEsplus 19,120 rejected
- 498Last 24 hours2,816 in the last 7 days
- 16,886Last 30 days1,541 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 9 | 7 | 0 | 0 | 21 | 21 |
| Title | ||
|---|---|---|
| CVE-2026-63171 | Omnispace Agora Project < 26.10.0 Stored XSS via Category DescriptionOmnispace · Agora Project | Medium5.1 |
| CVE-2026-63169 | Omnispace Agora Project < 26.10.0 Stored XSS via Messenger IframeOmnispace · Agora Project | Medium5.3 |
| CVE-2026-63168 | Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array BypassOmnispace · Agora Project | Medium5.1 |
| CVE-2026-63157 | Omnispace Agora Project < 26.10.0 Stored XSS via Links ModuleOmnispace · Agora Project | Medium5.1 |
| CVE-2026-63156 | Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl ParameterOmnispace · Agora Project | Medium5.1 |
| CVE-2026-63148 | Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment FilenameOmnispace · Agora Project | Medium5.1 |
| CVE-2026-63147 | Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File NameOmnispace · Agora Project | Medium5.1 |
| CVE-2026-63172 | Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-EditOmnispace · Agora Project | High7.1 |
| CVE-2026-63161 | Omnispace Agora Project < 26.10.0 Session Fixation via AuthenticationOmnispace · Agora Project | High8.6 |
| CVE-2026-63174 | Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectListOmnispace · Agora Project | High8.6 |
| CVE-2026-63153 | Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()Omnispace · Agora Project | High8.6 |
| CVE-2026-63165 | Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents ParameterOmnispace · Agora Project | High8.6 |
| CVE-2026-63152 | Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilterOmnispace · Agora Project | High8.6 |
| CVE-2026-63163 | Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownloadOmnispace · Agora Project | High8.7 |
| CVE-2026-63162 | Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName ParameterOmnispace · Agora Project | High8.7 |
| CVE-2026-63154 | Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]Omnispace · Agora Project | High8.7 |
| CVE-2026-63160 | Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token StorageOmnispace · Agora Project | Critical9.1 |
| CVE-2026-63159 | Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account TakeoverOmnispace · Agora Project | Critical9.1 |
| CVE-2026-63158 | Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via CookiesOmnispace · Agora Project | Critical9.1 |
| CVE-2026-63149 | Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()Omnispace · Agora Project | Critical9.1 |
| CVE-2026-63146 | Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.phpOmnispace · Agora Project | Critical9.3 |