Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,292All CVEsplus 19,140 rejected
- 451Last 24 hours2,724 in the last 7 days
- 16,915Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 7 | 6 | 3 | 0 | 0 | 16 | 25 |
| 2025 | 1 | 2 | 5 | 0 | 0 | 8 | 9 |
| 2024 | 0 | 0 | 0 | 1 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-115731 | Report Deserialization Code ExecutionPerforce · Puppet Enterprise | Critical9.4 |
| CVE-2026-115732 | Certificate Name Authorization BypassPerforce · Puppet Enterprise | Critical9.0 |
| CVE-2026-103509 | Credential Disclosure in P4 Search Configuration APIPerforce · P4 (Helix core) | High8.5 |
| CVE-2026-103508 | Path traversal via logging configuration in P4SearchPerforce · P4 (Helix core) | High7.3 |
| CVE-2026-109758 | Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM…Perforce · Helix Authentication Service | Critical9.3 |
| CVE-2026-103510 | Authentication bypass via blank auth token in P4SearchPerforce · P4 (Helix Core) | Critical9.5 |
| CVE-2026-103511 | Arbitrary file-write via extension installation in P4SearchPerforce · P4 (Helix Core) | Medium5.1 |
| CVE-2026-103512 | Ticket host-binding bypass via spoofed client IP in P4SearchPerforce · P4 (Helix Core) | Medium5.3 |
| CVE-2026-103507 | Arbitrary file-write via log configuration path in P4SearchPerforce · P4 (Helix Core) | High7.5 |
| CVE-2026-100102 | RCE via exposed JDWP debug agent in P4SearchPerforce · P4 (Helix Core) | Critical9.5 |
| CVE-2026-89212 | XML External Entity in Akana API PlatformPerforce · Akana | Critical9.2 |
| CVE-2026-85978 | Unauthenticated Remote Code Execution in Akana API PlatformPerforce · Akana | Critical10.0 |
| CVE-2026-14254 | Improper Restriction of Excessive Authentication Attempts in Delphix Continuous DataPerforce · Delphix Continuous Data | High8.3 |
| CVE-2026-8804 | Cleartext Storage of Sensitive Information for Puppet Resource APIPerforce · Puppet Core | Medium6.7 |
| CVE-2026-6902 | Code Injection in Perforce P4 (Helix Core)Perforce · P4 (Helix Core) | High7.7 |
| CVE-2026-6043 | Insecure Default Configuration in P4 ServerPerforce · Helix Core Server (P4D) | High8.8 |
| CVE-2025-14591 | PII Leak Due to Change in EOR HandlingPerforce · Delphix Continuous Compliance | Medium5.3 |
| CVE-2025-13472 | Missing authorization in BlazeMeter Jenkins PluginPerforce · BlazeMeter | Medium5.3 |
| CVE-2025-10360 | Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5Perforce · Puppet Enterprise | Medium6.9 |
| CVE-2025-5459 | OS Command InjectionPerforce · Puppet Enterprise | High8.6 |
| CVE-2025-2903 | Privilege Chaining in DelphixPerforce · Delphix | High8.5 |
| CVE-2025-3113 | Improper Access Control in Delphix Masking EnginePerforce · Delphix | Critical9.0 |
| CVE-2024-11084 | Potential Username Enumeration in Helix ALMPerforce · Helix ALM | Medium6.3 |
| CVE-2025-1714 | Username Enumeration in GliffyPerforce · Gliffy | Medium6.9 |
| CVE-2024-3995 | Command Injection in Helix ALMPerforce · Helix ALM | Low2.0 |