Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 452Last 24 hours2,722 in the last 7 days
- 16,913Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 5 | 1 | 0 | 0 | 9 | 20 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 11 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 11 |
| 2023 | 0 | 8 | 3 | 0 | 0 | 11 | 11 |
| Title | ||
|---|---|---|
| CVE-2026-46334 | OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloningOpenSIPS · opensips | High8.7 |
| CVE-2026-45809 | OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URIOpenSIPS · opensips | High8.7 |
| CVE-2026-45705 | OpenSIPS: OOB Read in Multipart Body Boundary ParsingOpenSIPS · opensips | Medium5.3 |
| CVE-2026-45537 | OpenSIPS: Global Buffer Overflow in construct_uriOpenSIPS · opensips | Critical9.1 |
| CVE-2026-45103 | OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer OverflowOpenSIPS · opensips | High7.5 |
| CVE-2026-45100 | OpenSIPS: Buffer Overflow in Base64 Encode TransformationOpenSIPS · opensips | Critical9.1 |
| CVE-2026-45084 | OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type stateOpenSIPS · opensips | High8.7 |
| CVE-2026-45538 | OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name CopyOpenSIPS · opensips | Critical9.8 |
| CVE-2026-25554 | OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication BypassOpenSIPS · OpenSIPS | High8.3 |
| CVE-2023-28099 | OpenSIPS has vulnerability in the ds_is_in_list() functionOpenSIPS · opensips | Medium5.9 |
| CVE-2023-28098 | OpenSIPS has vulnerability in the Digest Authentication ParserOpenSIPS · opensips | Medium5.9 |
| CVE-2023-28097 | OpenSIPS has vulnerability in the Content-Length ParserOpenSIPS · opensips | High7.5 |
| CVE-2023-28096 | OpenSIPS has memory leak in cJSON libOpenSIPS · opensips | Medium4.5 |
| CVE-2023-28095 | OpenSIPS has vulnerability in the building the local negative repliesOpenSIPS · opensips | High7.5 |
| CVE-2023-27601 | OpenSIPS has vulnerability in the codec_delete_XX() functionsOpenSIPS · opensips | High7.5 |
| CVE-2023-27600 | OpenSIPS has vulnerability in the codec_delete_XX() functionsOpenSIPS · opensips | High7.5 |
| CVE-2023-27599 | OpenSIPS has vulnerability in the parse_to_param() functionOpenSIPS · opensips | High7.5 |
| CVE-2023-27598 | OpenSIPS has vulnerability in the parse_via() functionOpenSIPS · opensips | High7.5 |
| CVE-2023-27597 | OpenSIPS has vulnerability in the parse_uri() functionOpenSIPS · opensips | High7.5 |
| CVE-2023-27596 | OpenSIPS has vulnerability in the codec_delete_XX() functionsOpenSIPS · opensips | High7.5 |