Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,155All CVEsplus 18,875 rejected
- 810Last 24 hours3,270 in the last 7 days
- 17,425Last 30 days1,568 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 16 |
| 2020 | 0 | 1 | 0 | 0 | 0 | 1 | 16 |
| 2019 | 0 | 4 | 9 | 0 | 0 | 13 | 15 |
| 2018 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2015-5201 | VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in…RedHat · Enterprise Virtualization Hypervisor (aka RHEV-H) | High7.5 |
| CVE-2019-19341 | A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both the…RedHat · Tower | Medium5.9 |
| CVE-2019-10172 | A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus…Redhat · jackson-mapper-asl | Medium5.9 |
| CVE-2013-4280 | Insecure temporary file vulnerability in RedHat vsdm 4.9.6.RedHat · vdsm | Medium5.5 |
| CVE-2018-5742 | An oversight while backporting a feature leads to an assertion failure in buffer.c:420RedHat · BIND9 | Medium5.9 |
| CVE-2019-3834 | It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON). This flaw allows attackers to manipulate ClassLoader…RedHat · struts | Medium5.6 |
| CVE-2019-10212 | A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the…RedHat · undertow | Medium4.8 |
| CVE-2019-10202 | A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525,…RedHat · codehaus | High8.1 |
| CVE-2019-10176 | A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain…RedHat · atomic-openshift | Medium4.2 |
| CVE-2019-10171 | It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be…RedHat · 389-ds-base | High7.5 |
| CVE-2019-10142 | A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an…RedHat · kernel | High7.1 |
| CVE-2019-10141 | A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in…RedHat · openstack-ironic-inspector | High8.3 |
| CVE-2019-10150 | It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds.…redhat · atomic-openshift | Medium5.9 |
| CVE-2017-15123 | A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An…redhat · CloudForms | Medium5.3 |
| CVE-2016-9586 | curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions.…redhat · curl | Medium5.9 |
| CVE-2018-1086 | pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs…redhat · pcs | Medium4.3 |