Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,293All CVEsplus 19,140 rejected
- 448Last 24 hours2,721 in the last 7 days
- 16,912Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 6 | 3 | 0 | 14 | 35 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 21 |
| 2024 | 0 | 8 | 5 | 1 | 0 | 14 | 20 |
| 2023 | 1 | 4 | 1 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-11744 | PaperCut Hive Embedded App for Ricoh: Javascript injectionPaperCut · PaperCut Hive | Low3.8 |
| CVE-2026-87739 | PaperCut MF/NG: User permissions are not evaluated on report generationPaperCut · PaperCut NG/MF | Medium6.9 |
| CVE-2026-82077 | PaperCut NG/MF: Remote Code Execution via Scan2FaxPaperCut · PaperCut NG/MF | High7.3 |
| CVE-2026-14780 | PaperCut NG/MF: Remote Code Execution via Scripting SubsystemPaperCut · PaperCut NG/MF | High7.5 |
| CVE-2026-82078 | PaperCut MF/NG: Unsafe Dynamic Class Loading in Database ConnectorExploitedPaperCut · PaperCut MF/NG | Critical9.4 |
| CVE-2026-81578 | PaperCut MF/NG: Authentication BypassExploitedPaperCut · PaperCut MF/NG | High8.8 |
| CVE-2026-8794 | PaperCut NG/MF: User enumeration via timing attackPaperCut · PaperCut NG/MF | Medium6.9 |
| CVE-2026-8793 | PaperCut NG/MF: Insufficient brute-force protectionPaperCut · PaperCut NG/MF | Medium6.9 |
| CVE-2026-6645 | Insecure Search Path Vulnerability in PaperCut Print Deploy Client for WindowsPaperCut · Print Deploy | High7.3 |
| CVE-2026-7824 | PaperCut Hive (Ricoh): Plain text password in logsPaperCut · PaperCut Hive | Medium5.9 |
| CVE-2026-6418 | PaperCut NG/MF: Path Traversal in Shared Account SynchronizationPaperCut · PaperCut NG/MF | Medium4.6 |
| CVE-2026-6180 | PaperCut MF: Card truncation on HP readersPaperCut · PaperCut NG/MF | Medium4.1 |
| CVE-2026-5115 | Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devicesPaperCut · Papercut NG/MF | Low3.6 |
| CVE-2026-4794 | Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MFPaperCut · PaperCut NG/MF | Low2.1 |
| CVE-2025-9785 | Misconfigured certificate validation with self-signed certificates for Print DeployPaperCut · Print Deploy | High7.7 |
| CVE-2024-9672 | Reflected XSS in PaperCut MFPaperCut · PaperCut MF | Medium6.3 |
| CVE-2023-39470 | PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution VulnerabilityPaperCut · NG | High7.2 |
| CVE-2024-8404 | Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folderPaperCut · PaperCut NG, PaperCut MF | High7.8 |
| CVE-2024-8405 | Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attackPaperCut · PaperCut NG, PaperCut MF | Medium6.1 |
| CVE-2024-4712 | Arbitrary File Creation in PaperCut NG/MF Web Print Image HandlerPaperCut · PaperCut NG, PaperCut MF | High7.8 |
| CVE-2024-3037 | Arbitrary File Deletion in PaperCut NG/MF Web PrintPaperCut · PaperCut NG, PaperCut MF | High7.8 |
| CVE-2023-39469 | PaperCut NG External User Lookup Code Injection Remote Code Execution VulnerabilityPaperCut · NG | High7.2 |
| CVE-2024-1884 | Server Side Request Forgery in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | Medium6.5 |
| CVE-2024-1883 | Reflected XSS in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | Medium6.3 |
| CVE-2024-1882 | Server-side resource injection in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | High7.2 |
| CVE-2024-1654 | Unauthorized write operations in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | High7.2 |
| CVE-2024-1223 | Improper authorization controls in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | Medium4.8 |
| CVE-2024-1222 | Incorrect authorization controls in PaperCut NG/MF APIsPaperCut · PaperCut NG, PaperCut MF | High8.6 |
| CVE-2024-1221 | Improper access controls on APIs on Linux and macOS in PaperCut NG/MFPaperCut · PaperCut NG, PaperCut MF | Low3.1 |
| CVE-2023-6006 | Privilege Escalation VulnerabilityPaperCut · PaperCut NG, PaperCut MF | High7.8 |
| CVE-2023-4568 | PaperCut NG Unauthenticated XMLRPCPaperCut · PaperCut NG | Medium6.5 |
| CVE-2023-3486 | PaperCut NG Unauthenticated File UploadPaperCut · PaperCut NG | High8.2 |
| CVE-2023-2533 | PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRFExploitedPaperCut · PaperCut NG/MF | High8.4 |
| CVE-2023-27351 | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not…ExploitedPaperCut · NG | High8.2 |
| CVE-2023-27350 | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not…ExploitedPaperCut · NG | Critical9.8 |