Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,151All CVEsplus 19,119 rejected
- 492Last 24 hours2,789 in the last 7 days
- 16,903Last 30 days1,554 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 1 | 6 | 4 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2026-63242 | Business logic vulnerabilityThree Learning · Koollab LMS | Medium4.3 |
| CVE-2026-63241 | Insecure direct object reference vulnerabilityThree Learning · Koollab LMS | Low3.1 |
| CVE-2026-63240 | Information disclosure vulnerabilityThree Learning · Koollab LMS | Medium4.3 |
| CVE-2026-63239 | Hard-coded AWS IAM credentials vulnerabilityThree Learning · Koollab LMS | Medium5.4 |
| CVE-2026-63238 | Authentication bypass vulnerabilityThree Learning · Koollab LMS | Medium6.5 |
| CVE-2026-63237 | TOTP two-factor authentication bypass vulnerabilityThree Learning · Koollab LMS | Medium4.8 |
| CVE-2026-63236 | Improper access control vulnerabilityThree Learning · Koollab LMS | Low3.7 |
| CVE-2026-63235 | Improper access control vulnerabilityThree Learning · Koollab LMS | Low3.7 |
| CVE-2026-63234 | SQL injection and unsafe deserialisation vulnerabilityThree Learning · Koollab LMS | Critical9.9 |
| CVE-2026-63233 | SQL injection and unsafe deserialisation vulnerabilityThree Learning · Koollab LMS | Critical9.9 |
| CVE-2026-63232 | SQL injection and unsafe deserialisation vulnerabilityThree Learning · Koollab LMS | Critical9.9 |
| CVE-2026-63231 | Post-authentication SQL injection vulnerabilityThree Learning · Koollab LMS | High8.1 |
| CVE-2026-63230 | Pre-authentication error-based SQL injection vulnerabilityThree Learning · Koollab LMS | Critical9.1 |
| CVE-2026-63229 | Pre-authentication blind SQL injection vulnerabilityThree Learning · Koollab LMS | Critical9.1 |
| CVE-2026-63228 | Unrestricted image upload vulnerabilityThree Learning · Koollab LMS | Low2.6 |
| CVE-2026-3007 | Stored Cross-Site Scripting (XSS) VulnerabilityThree Learning · Koollab Learning Management System | Medium5.4 |