Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,985All CVEsplus 19,118 rejected
- 417Last 24 hours2,843 in the last 7 days
- 16,805Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 5 | 0 | 0 | 8 | 27 |
| 2025 | 0 | 0 | 1 | 1 | 0 | 2 | 19 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 17 |
| 2023 | 0 | 5 | 2 | 0 | 0 | 7 | 16 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 9 |
| 2021 | 2 | 5 | 0 | 0 | 0 | 7 | 9 |
| 2020 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-42207 | Magento LTS: Open Redirect via Unvalidated `uenc` Parameter in `stockAction()` - magento-ltsOpenMage · magento-lts | Medium6.1 |
| CVE-2026-42155 | Magento LTS: Weak API Session ID — Predictable MD5 of Time-Derived InputsOpenMage · magento-lts | Critical9.3 |
| CVE-2026-42458 | Magento LTS: Reflected XSS - Import -> Data Flow (profiles)OpenMage · magento-lts | Medium5.3 |
| CVE-2026-40488 | OpenMage LTS has Customer File Upload Extension Blocklist Bypass that Leads to Remote Code ExecutionOpenMage · magento-lts | High8.7 |
| CVE-2026-40098 | OpenMage LTS imports cross-user wishlist item via shared wishlist code, leading to private option disclosure and file-disclosure variantOpenMage · magento-lts | Medium5.3 |
| CVE-2026-25525 | OpenMage LTS has Path Traversal Filter Bypass in Dataflow ModuleOpenMage · magento-lts | Medium4.9 |
| CVE-2026-25524 | OpenMage LTS's Phar Deserialization leads to Remote Code ExecutionOpenMage · magento-lts | High8.1 |
| CVE-2026-25523 | Magento's X-Original-Url header can expose admin urlOpenMage · magento-lts | Medium5.3 |
| CVE-2025-64174 | OpenMage is vulnerable to XSS in Admin NotificationsOpenMage · magento-lts | Medium4.6 |
| CVE-2025-27400 | Magento vulnerable to stored XSS in theme config fieldsOpenMage · magento-lts | Low2.9 |
| CVE-2024-41676 | Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configsOpenMage · magento-lts | Medium4.1 |
| CVE-2023-41879 | Magento LTS's guest order "protect code" can be brute-forced too easilyOpenMage · magento-lts | High7.5 |
| CVE-2023-23617 | OpenMage LTS has DoS vulnerability in MaliciousCode filterOpenMage · magento-lts | Medium4.9 |
| CVE-2021-41231 | OpenMage LTS DataFlow upload remote code execution vulnerabilityOpenMage · magento-lts | High7.2 |
| CVE-2021-41144 | OpenMage LTS authenticated remote code execution through layout updateOpenMage · magento-lts | High8.8 |
| CVE-2021-41143 | OpenMage LTS arbitrary file deletion in customer media allows for remote code executionOpenMage · magento-lts | High7.2 |
| CVE-2021-39217 | OpenMage LTS arbitrary command execution in custom layout update through blocksOpenMage · magento-lts | High7.2 |
| CVE-2021-21395 | Magneto-lts vulnerable to Cross-Site Request ForgeryOpenMage · magento-lts | Medium4.2 |
| CVE-2021-32759 | Data Flow Sanitation Issue FixOpenMage · magento-lts | High7.2 |
| CVE-2021-32758 | Layout XML Arbitrary Code FixOpenMage · magento-lts | High7.2 |
| CVE-2021-21427 | Backport for CVE-2021-21024 Blind SQLi from Magento 2OpenMage · magento-lts | Critical9.1 |
| CVE-2021-21426 | Fixes a bug in Zend Framework's Stream HTTP WrapperOpenMage · magento-lts | Critical9.8 |
| CVE-2020-26295 | CMS Editor code executionOpenMage · magento-lts | High8.7 |
| CVE-2020-26285 | Widget instances allows a hacker to inject an executable file on the server on OpenMageOpenMage · magento-lts | High8.7 |
| CVE-2020-26252 | Layout XML RCE Vulnerability in OpenMageOpenMage · magento-lts | High8.7 |
| CVE-2020-15244 | RCE in MagentoOpenMage · magento-lts | High8.0 |
| CVE-2020-15151 | Observable Timing Discrepancy in OpenMage LTSOpenMage · magento-lts | High8.0 |