Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,292All CVEsplus 19,140 rejected
  • 451Last 24 hours2,724 in the last 7 days
  • 16,915Last 30 days1,557 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000015
202530000315
202421000312
20231100029
20220150067
20210010011

Latest CVEs

15 CVEs, newest first

CVEs, newest first
Title
CVE-2025-2777
SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity InjectionSysAid · SysAid On-Prem
Critical9.3
CVE-2025-2776
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity InjectionExploitedSysAid · SysAid On-Prem
Critical9.3
CVE-2025-2775
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity InjectionExploitedSysAid · SysAid On-Prem
Critical9.3
CVE-2024-36394
SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Sysaid · SysAid
Critical9.1
CVE-2024-36393
SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Sysaid · SysAid
Critical9.9
CVE-2024-27775
SysAid - CWE-918: Server-Side Request Forgery (SSRF)SysAid · SysAid
High7.2
CVE-2023-32226
Sysaid - CWE-552: Files or Directories Accessible to External PartiesSysaid · Sysaid
High8.3
CVE-2023-32225
Sysaid - CWE-434: Unrestricted Upload of File with Dangerous TypeSysaid · Sysaid
Critical9.8
CVE-2022-23170
SysAid - Okta SSO integrationSysaid · SysAid - Okta SSO integration
Medium5.9
CVE-2022-23166
Sysaid – Sysaid Local File Inclusion (LFI)SysAid · Sysaid
Medium6.1
CVE-2022-23165
Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS)SysAid · Sysaid
Medium5.5
CVE-2022-22798
Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access ControlSysAid · Sysaid
Medium6.8
CVE-2022-22797
Sysaid – sysaid Open RedirectSysAid · Sysaid
Medium4.6
CVE-2022-22796
Sysaid – Sysaid System TakeoverSysAid · Sysaid
High7.0
CVE-2021-36721
Sysaid - Sysaid API User EnumerationSysAid · SysAid API
Medium4.4