Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,720 in the last 7 days
- 16,915Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 7 | 1 | 0 | 14 | 21 |
| 2025 | 0 | 1 | 4 | 1 | 0 | 6 | 7 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-119591 | SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES ClauseSQLite · SQLite | Medium6.8 |
| CVE-2026-119586 | SQLite CLI through 3.54.1 Command Injection via .recover OutputSQLite · SQLite | High8.5 |
| CVE-2026-119379 | SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()SQLite · SQLite | High8.5 |
| CVE-2026-119378 | SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()SQLite · SQLite | Medium6.8 |
| CVE-2026-119377 | SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USINGSQLite · SQLite | Low2.0 |
| CVE-2026-119376 | SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator ChainSQLite · SQLite | Medium6.8 |
| CVE-2026-119375 | SQLite before 3.54.0 Information Disclosure via WAL Page Size MismatchSQLite · SQLite | Medium6.8 |
| CVE-2026-119374 | SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()SQLite · SQLite | High8.5 |
| CVE-2026-119373 | SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()SQLite · SQLite | High8.5 |
| CVE-2026-119372 | SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()SQLite · SQLite | Medium6.8 |
| CVE-2026-119371 | SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()SQLite · SQLite | Medium6.8 |
| CVE-2026-11824 | SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterateSQLite · SQLite | High8.5 |
| CVE-2026-11822 | SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeekSQLite · SQLite | Medium6.8 |
| CVE-2025-71316 | SQLite sqldiff remote code execution via argument injectionSQLite · sqldiff | Critical9.2 |
| CVE-2025-7709 | Out Of Bounds write in FTS5 Extension in SQLiteSQLite · FTS5 | Medium6.9 |
| CVE-2025-7458 | SQLite integer overflow in key info allocation may lead to information disclosure.SQLite · SQLite | Medium6.9 |
| CVE-2025-6965 | Integer Truncation on SQLiteSQLite · SQLite | High7.2 |
| CVE-2025-3277 | An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then…SQLite · sqlite | Medium6.9 |
| CVE-2025-29088 | In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An…SQLite · SQLite | Medium5.6 |
| CVE-2025-29087 | In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the…SQLite · SQLite | Low3.2 |
| CVE-2023-7104 | SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflowSQLite · SQLite3 | Medium5.5 |