Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,091All CVEsplus 18,873 rejected
  • 777Last 24 hours3,293 in the last 7 days
  • 17,426Last 30 days1,557 of them critical
  • 1,766Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260113001415
20250000001
20240000001
20230000001
20220000001
20210000001
20200000001
20190010011

Latest CVEs

15 CVEs, newest first

CVEs, newest first
Title
CVE-2019-25705
Echo Mirage 3.1 Stack Buffer Overflow via Rules Action FieldSourceforge · Echo Mirage
High8.6
CVE-2018-25251
Snes9K 0.0.9z Buffer Overflow SEH via Netplay SocketSourceforge · Snes9K 0.0.9z
High8.6
CVE-2018-25209
OpenBiz Cubi Lite 3.0.8 SQL Injection via username ParameterSourceforge · OpenBiz Cubi Lite
High8.8
CVE-2019-25632
phpFileManager 1.7.8 Local File Inclusion via index.phpSourceforge · phpFileManager
Medium6.9
CVE-2019-25575
SimplePress CMS 1.0.7 SQL Injection via p and s ParametersSourceforge · SimplePress CMS
High8.8
CVE-2019-25539
202CMS v10 beta SQL Injection via register.phpSourceforge · 202CMS
High8.8
CVE-2019-25538
202CMS v10 beta SQL Injection via log_user ParameterSourceforge · 202CMS
High8.8
CVE-2019-25529
Placeto CMS Alpha rv.4 SQL Injection via page ParameterSourceforge · Placeto CMS
High7.1
CVE-2018-25192
GPS Tracking System 2.12 SQL Injection via username ParameterSourceforge · GPS Tracking System
High8.8
CVE-2018-25190
Easyndexer 1.0 Cross-Site Request Forgery via createuser.phpSourceforge · Easyndexer
Medium6.9
CVE-2018-25189
Data Center Audit 2.6.2 SQL Injection via username ParameterSourceforge · Data Center Audit
High8.8
CVE-2018-25178
Easyndexer 1.0 Arbitrary File Download via showtif.phpSourceforge · Easyndexer
High8.7
CVE-2018-25177
Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.phpSourceforge · Data Center Audit
Medium6.9
CVE-2018-25166
Meneame English Pligg 5.8 SQL Injection via search ParameterSourceforge · Meneame English Pligg
High8.8
CVE-2019-1010004
SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at…Sourceforge · SoX - Sound eXchange
Medium5.5