Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,167All CVEsplus 19,120 rejected
- 476Last 24 hours2,789 in the last 7 days
- 16,880Last 30 days1,552 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 0 | 1 | 0 | 0 | 3 | 11 |
| 2025 | 0 | 2 | 0 | 0 | 0 | 2 | 8 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2023 | 0 | 1 | 0 | 0 | 0 | 1 | 6 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2021 | 1 | 0 | 3 | 0 | 0 | 4 | 5 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2018 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-68484 | Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges,…Sage · Sage AR Automation | Critical9.0 |
| CVE-2026-67403 | Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated…Sage · Sage AR Automation | Critical9.0 |
| CVE-2026-67395 | A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By…Sage · Employee Self Service | Medium5.9 |
| CVE-2025-1887 | SMB forced authentication vulnerability in Sage 200 SpainSage · Sage 200 Spain | High7.1 |
| CVE-2025-1886 | Pass-Back vulnerability in Sage 200 SpainSage · Sage 200 Spain | High7.1 |
| CVE-2023-2809 | Use of Cleartext credentials in Sage 200 SpainSage · Sage 200 Spain | High7.8 |
| CVE-2020-7390 | Sage X3 Syracuse Persistent XSS in Edit User pageSage · X3 | Medium4.6 |
| CVE-2020-7389 | Sage X3 Syracuse Missing Authentication for Critical Function in Developer EnvironmentSage · X3 | Medium5.5 |
| CVE-2020-7388 | Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by SpoofingSage · X3 | Critical10.0 |
| CVE-2020-7387 | Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized ActorSage · X3 | Medium5.3 |
| CVE-2017-3183 | Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functionsSage · XRT Treasury | High8.8 |