Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,200All CVEsplus 19,120 rejected
- 498Last 24 hours2,816 in the last 7 days
- 16,886Last 30 days1,541 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 2 | 0 | 0 | 2 | 11 |
| 2025 | 0 | 1 | 1 | 0 | 0 | 2 | 9 |
| 2024 | 2 | 5 | 0 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-4169 | Tecnick TCExam XML Export tce_xml_users.php F_xml_export_users cross site scriptingTecnick · TCExam | Medium4.8 |
| CVE-2026-4168 | Tecnick TCExam Group tce_edit_group.php cross site scriptingTecnick · TCExam | Medium4.8 |
| CVE-2025-23176 | Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Tecnick · TCExam | High8.8 |
| CVE-2025-23175 | Tecnick - Multiple XSS (CWE-79)Tecnick · TCExam | Medium6.1 |
| CVE-2024-47926 | Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Tecnick · TCExam | Critical9.8 |
| CVE-2024-47925 | Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Tecnick · TCExam | High7.5 |
| CVE-2024-56527 | An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message.tecnick · tcpdf | High7.5 |
| CVE-2024-56522 | An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF…tecnick · tcpdf | High7.5 |
| CVE-2024-56521 | An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.tecnick · tcpdf | Critical9.8 |
| CVE-2024-56520 | An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and…tecnick · tcpdf | High7.3 |
| CVE-2024-56519 | An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute.tecnick · tcpdf | High7.5 |