Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,211All CVEsplus 19,120 rejected
- 502Last 24 hours2,819 in the last 7 days
- 16,887Last 30 days1,542 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 24 | 4 | 4 | 0 | 34 | 56 |
| 2025 | 0 | 8 | 4 | 0 | 0 | 12 | 22 |
| 2024 | 4 | 6 | 0 | 0 | 0 | 10 | 10 |
| Title | ||
|---|---|---|
| CVE-2026-89077 | MOVEit Transfer Identity validation flaw in SFTP authenticationProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89076 | MOVEit Transfer SQL injection in custom reportingProgress · MOVEit Transfer | High7.2 |
| CVE-2026-89075 | MOVEit Transfer Local Disclosure of Session Information VulnerabilityProgress · MOVEit Transfer | High7.3 |
| CVE-2026-89074 | MOVEit Transfer Email MFA BypassProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89073 | MOVEit Transfer Access restriction bypass in OAuth authenticationProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89072 | MOVEit Transfer Authorization Flaw in Certificate ManagementProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89071 | MOVEit Transfer LDAP injection in certificate-based authenticationProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89070 | MOVEit Transfer OIDC Authentication Replay VulnerabilityProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89069 | MOVEit Transfer Stored XSS Vulnerability in Ad Hoc PackagesProgress · MOVEit Transfer | High8.0 |
| CVE-2026-89068 | MOVEit Transfer Authentication bypass in LDAP sign-onProgress · MOVEit Transfer | High8.1 |
| CVE-2026-89067 | MOVEit Transfer Secure Messaging Authentication BypassProgress · MOVEit Transfer | High8.8 |
| CVE-2026-87093 | MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege EscalationProgress · MOVEit Transfer | High8.8 |
| CVE-2026-93695 | Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyServiceProgress · ShareFile Storage Zones Controller | High7.4 |
| CVE-2026-93694 | Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones ControllerProgress · ShareFile Storage Zones Controller | Medium4.0 |
| CVE-2026-93693 | Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones ControllerProgress · ShareFile Storage Zones Controller | Medium6.5 |
| CVE-2026-16137 | Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones ControllerProgress · ShareFile Storage Zones Controller | High7.2 |
| CVE-2026-16138 | Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO serviceProgress · ShareFile Storage Zones Controller | High8.0 |
| CVE-2026-16139 | Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code executionProgress · ShareFile Storage Zones Controller | High7.2 |
| CVE-2026-15968 | Stored XSS vulnerability in MOVEit TransferProgress · MOVEit Transfer | High7.1 |
| CVE-2026-15967 | MOVEit Transfer refresh-token processing does not enforce updated account restrictionsProgress · MOVEit Transfer | High7.5 |
| CVE-2026-15966 | Improper CORS handling in MOVEit TransferProgress · MOVEit Transfer | High7.5 |
| CVE-2026-10697 | MFA Bypass in MOVEit TransferProgress · MOVEit Transfer | High7.5 |
| CVE-2026-15724 | Path traversal in Progress ShareFile Storage Zones Controller (SZC)Progress · ShareFile Storage Zones Controller | High8.7 |
| CVE-2026-8801 | File Extension Restriction Bypass in MOVEit TransferProgress · MOVEit Transfer | Low3.5 |
| CVE-2026-8800 | Cross-Org External Token Metadata accessible to AuditUser roleProgress · MOVEit Transfer | Low2.7 |
| CVE-2026-8651 | IPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit TransferProgress · MOVEit Transfer | Low3.7 |
| CVE-2026-8650 | Authenticated Path Traversal allows MOVEit admins to view arbitrary system filesProgress · MOVEit Transfer | Medium4.5 |
| CVE-2026-8649 | Institution scope bypass vulnerability in custom reportsProgress · MOVEit Transfer | Medium6.4 |
| CVE-2026-11903 | Stored XSS in MOVEit Transfer Ad Hoc moduleProgress · MOVEit Transfer | High8.0 |
| CVE-2026-10699 | Memory leak in SFTP service can result in a denial of service in MOVEit TransferProgress · MOVEit Transfer | High7.5 |
| CVE-2026-10698 | Table scope bypass vulnerability in custom reportsProgress · MOVEit Transfer | High7.2 |
| CVE-2026-2701 | RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)Progress · ShareFile Storage Zones Controller | Critical9.1 |
| CVE-2026-2699 | EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)Progress · ShareFile Storage Zones Controller | Critical9.8 |
| CVE-2025-11235 | MOVEit Transfer REST API does not require current password in order to initiate the password change processProgress · MOVEit Transfer | Low3.7 |
| CVE-2025-13147 | External Service Interaction (DNS)Progress · MOVEit Transfer | Medium5.3 |
| CVE-2025-10703 | Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC…Progress · DataDirect Connect for JDBC for Amazon Redshift | High8.6 |
| CVE-2025-10702 | Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC…Progress · DataDirect Connect for JDBC for Amazon Redshift | High8.6 |
| CVE-2025-10932 | AS2 module allows uncontrolled file uploadsProgress · MOVEit Transfer | High8.2 |
| CVE-2025-1758 | Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions…Progress · LoadMaster | Medium4.3 |
| CVE-2025-2324 | A MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folderProgress · MOVEit Transfer | Medium5.9 |
| CVE-2024-56135 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.Progress · LoadMaster | High8.4 |
| CVE-2024-56134 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.Progress · LoadMaster | High8.4 |
| CVE-2024-56133 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.Progress · LoadMaster | High8.4 |
| CVE-2024-56132 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.Progress · LoadMaster | High8.4 |
| CVE-2024-56131 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.Progress · LoadMaster | High8.4 |
| CVE-2024-11627 | : Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142,…Progress · Sitefinity | Medium6.8 |
| CVE-2024-8755 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.Progress · LoadMaster | High8.4 |
| CVE-2024-6658 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.Progress · LoadMaster | High8.4 |
| CVE-2024-7591 | Improper Input Validation vulnerability in Progress LoadMaster allows OS Command InjectionProgress · LoadMaster | Critical10.0 |
| CVE-2024-7346 | Client connections using default TLS certificates from OpenEdge may bypass TLS host name validationProgress · OpenEdge | High7.2 |