Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,160All CVEsplus 19,120 rejected
- 490Last 24 hours2,790 in the last 7 days
- 16,893Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 8 | 2 | 0 | 0 | 14 | 14 |
| Title | ||
|---|---|---|
| CVE-2026-78555 | RansomLook API Key Disclosure Through /admin/apikeys HTML Sourceransomlook · ransomlook | Critical9.4 |
| CVE-2026-78553 | Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLookransomlook · ransomlook | High7.0 |
| CVE-2026-78551 | RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attemptsransomlook · ransomlook | High8.8 |
| CVE-2026-78391 | Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLookransomlook · ransomlook | High8.8 |
| CVE-2026-78387 | RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modificationransomlook · ransomlook | Critical9.4 |
| CVE-2026-78386 | Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook APIransomlook · ransomlook | High8.7 |
| CVE-2026-78385 | RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Accessransomlook · ransomlook | High8.2 |
| CVE-2026-78381 | RansomLook Arbitrary File Read via Path Traversal in Post screen Fieldransomlook · ransomlook | High8.2 |
| CVE-2026-78380 | Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLookransomlook · ransomlook | High8.7 |
| CVE-2026-78378 | Redis Glob Pattern Injection Allows Unauthorized Enumeration of Private Ransomlook Dataransomlook · ransomlook | Medium6.9 |
| CVE-2026-78372 | RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Dataransomlook · ransomlook | Critical9.2 |
| CVE-2026-78370 | RansomLook Unauthenticated Database Export Exposes Private Dataransomlook · ransomlook | Critical9.2 |
| CVE-2026-78369 | Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLookransomlook · ransomlook | High8.8 |
| CVE-2026-40584 | RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information ExposureRansomLook · RansomLook | Medium6.9 |