Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,273All CVEsplus 19,140 rejected
- 466Last 24 hours2,759 in the last 7 days
- 16,923Last 30 days1,555 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 27 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 27 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 26 |
| 2023 | 0 | 25 | 0 | 0 | 0 | 25 | 25 |
| Title | ||
|---|---|---|
| CVE-2025-58780 | index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it "inaccurately…ScienceLogic · SL1 | High7.2 |
| CVE-2024-9537 | ScienceLogic SL1 unspecified vulnerabilityExploitedScienceLogic · SL1 | Critical9.3 |
| CVE-2022-48604 | A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48603 | A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48602 | A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48601 | A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48600 | A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48599 | A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48598 | A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48597 | A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48596 | A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48595 | A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48594 | A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48593 | A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48592 | A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48591 | A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48590 | A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48589 | A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48588 | A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48587 | A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48586 | A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48585 | A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48584 | A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48583 | A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48582 | A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48581 | A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it…ScienceLogic · SL 1 | High8.8 |
| CVE-2022-48580 | A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it…ScienceLogic · SL 1 | High8.8 |