Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,564All CVEsplus 18,890 rejected
- 398Last 24 hours3,029 in the last 7 days
- 17,099Last 30 days1,578 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 4 | 2 | 3 | 0 | 12 | 81 |
| 2025 | 0 | 8 | 3 | 1 | 0 | 12 | 69 |
| 2024 | 0 | 9 | 4 | 2 | 0 | 15 | 57 |
| 2023 | 0 | 3 | 7 | 0 | 0 | 10 | 42 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 32 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 32 |
| 2020 | 0 | 1 | 0 | 0 | 0 | 1 | 31 |
| 2019 | 2 | 5 | 5 | 1 | 0 | 13 | 30 |
| 2018 | 0 | 4 | 10 | 0 | 0 | 14 | 17 |
| 2017 | 0 | 2 | 1 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-15265 | Tenable Agent Path Traversal Leading to Remote Code Executiontenable · tenable_agent | Critical9.3 |
| CVE-2026-57588 | SQL Injection in Nessus via Malicious Scan Result File Importtenable · Nessus | Low1.6 |
| CVE-2026-57587 | SQL Injection in Nessus via Reverse DNS Lookuptenable · Nessus | Low2.1 |
| CVE-2026-13007 | Insecure Public Caching on REST API Endpoints in Tenable Identity Exposuretenable · Tenable Identity Exposure | High8.5 |
| CVE-2026-47358 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server…tenable · Terrascan | Critical9.3 |
| CVE-2026-47357 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST…tenable · Terrascan | Critical9.3 |
| CVE-2026-47356 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST…tenable · Terrascan | High8.7 |
| CVE-2026-2698 | Improper Access ControlTenable · Security Center | Medium5.7 |
| CVE-2026-2697 | Indirect Object Reference (IDOR) in Security CenterTenable · Security Center | Low2.1 |
| CVE-2026-2630 | [R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2Tenable · Security Center | High7.4 |
| CVE-2026-2026 | Improper Access Control Allows Denial of ServiceTenable · Agent | Medium5.4 |
| CVE-2025-36640 | Local Privilege EscalationTenable · Nessus Agent | High7.3 |
| CVE-2025-36636 | Improper Access ControlTenable · Security Center | Medium4.3 |
| CVE-2025-36630 | Local Privilege EscalationTenable · Nessus | High8.4 |
| CVE-2025-36632 | Local Privilege EscalationTenable · Agent | High7.8 |
| CVE-2025-36631 | Local Privilege EscalationTenable · Agent | High8.4 |
| CVE-2025-36633 | Local Privilege EscalationTenable · Agent | High8.8 |
| CVE-2025-24917 | Improper Access Control leads to Local Privilege EscalationTenable · Network Monitor | High7.8 |
| CVE-2025-24916 | Improper Access Control leads to Local Priviledge EscalationTenable · Network Monitor | High7.0 |
| CVE-2025-36625 | Log Poisoning in NessusTenable · Nessus | Medium4.3 |
| CVE-2025-24914 | Local Priviledge EscalationTenable · Nessus | High7.8 |
| CVE-2025-24915 | When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for…Tenable · Nessus Agent | High7.8 |
| CVE-2025-0760 | Stored Credential Disclosure VulnerabilityTenable · Tenable Identity Exposure | Low2.7 |
| CVE-2025-1091 | Broken Authorization SchemaTenable · Tenable Identity Exposure | Medium4.3 |
| CVE-2024-12174 | An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages…Tenable · Security Center | Low2.7 |
| CVE-2024-9158 | XSSTenable · Nessus Network Monitor | High8.4 |
| CVE-2024-3232 | Formula Injection VulnerabilityTenable · Tenable Identity Exposure | High7.6 |
| CVE-2024-5759 | Improper privilege managementTenable · Security Center | Medium5.4 |
| CVE-2024-1891 | Stored Cross Site ScriptingTenable · Security Center | Low3.5 |
| CVE-2024-3292 | Race ConditionTenable · Nessus Agent | High8.2 |
| CVE-2024-3291 | Privilege EscalationTenable · Nessus Agent | High7.8 |
| CVE-2024-3290 | Race ConditionTenable · Nessus | High8.2 |
| CVE-2024-3289 | When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for…Tenable · Nessus | High7.8 |
| CVE-2024-2390 | Local Privilege EscalationTenable · Nessus Agent | High7.8 |
| CVE-2024-1683 | DLL Injection in Tenable Identity Exposure Secure RelayTenable · Tenable Identity Exposure Secure Relay | High7.3 |
| CVE-2024-1471 | HTML Injection VulnerabilityTenable · Security Center | Medium5.9 |
| CVE-2024-1367 | Command Injection Vulnerability in Tenable Security CenterTenable · Security Center | High7.2 |
| CVE-2024-0971 | A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content.Tenable · Nessus | Medium6.5 |
| CVE-2024-0955 | Stored XSS vulnerabilityTenable · Nessus | Medium4.8 |
| CVE-2023-6178 | An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to…Tenable · Nessus Agent | Medium6.8 |
| CVE-2023-6062 | Arbitrary File WriteTenable · Nessus | Medium6.8 |
| CVE-2023-5847 | Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and…Tenable · Nessus | Medium6.7 |
| CVE-2023-5624 | Blind SQL InjectionTenable · Nessus Network Monitor | High7.2 |
| CVE-2023-5623 | Privilege EscalationTenable · Nessus Network Monitor | High7.0 |
| CVE-2023-5622 | Privilege EscalationTenable · Nessus Network Monitor | High7.1 |
| CVE-2023-3253 | Improper authorization in NessusTenable · Nessus | Medium4.3 |
| CVE-2023-3252 | Arbitrary File WriteTenable · Nessus | Medium6.8 |
| CVE-2023-3251 | Pass-back vulnerability in NessusTenable · Nessus | Medium4.1 |
| CVE-2023-2005 | Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation VulnerabilityTenable · Tenable.io | Medium6.3 |
| CVE-2021-21371 | Execution of untrusted code through config filetenable · integration-jira-cloud | Medium5.0 |