Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,973All CVEsplus 19,118 rejected
- 406Last 24 hours2,832 in the last 7 days
- 16,809Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 35 | 30 | 0 | 0 | 70 | 82 |
| 2025 | 1 | 5 | 4 | 1 | 0 | 11 | 12 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-116828 | YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operandYesWiki · yeswiki | Medium6.9 |
| CVE-2026-116827 | YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV ImportYesWiki · yeswiki | High8.2 |
| CVE-2026-116826 | YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFileYesWiki · yeswiki | High8.2 |
| CVE-2026-116825 | YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub InboxYesWiki · yeswiki | High8.3 |
| CVE-2026-116824 | YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites HandlerYesWiki · yeswiki | Medium5.3 |
| CVE-2026-116823 | YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST FallbackYesWiki · yeswiki | Medium5.3 |
| CVE-2026-116822 | YesWiki before 4.7.0 Template Traversal via BazarListeAction template ParameterYesWiki · yeswiki | Medium6.9 |
| CVE-2026-116821 | YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in UsernamesYesWiki · yeswiki | High7.1 |
| CVE-2026-116820 | YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq ParameterYesWiki · yeswiki | Medium6.9 |
| CVE-2026-116211 | YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry createYesWiki · yeswiki | High8.8 |
| CVE-2026-116208 | YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPostsYesWiki · yeswiki | High7.2 |
| CVE-2026-116207 | YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search APIYesWiki · yeswiki | High8.8 |
| CVE-2026-116206 | YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML SyntaxYesWiki · yeswiki | Medium5.3 |
| CVE-2026-116205 | YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion SyntaxYesWiki · yeswiki | Medium6.9 |
| CVE-2026-116204 | YesWiki before 4.7.0 CSRF via despam Admin ActionYesWiki · yeswiki | High7.2 |
| CVE-2026-116203 | YesWiki before 4.7.0 Stored XSS via filtertags Action ParametersYesWiki · yeswiki | Medium5.3 |
| CVE-2026-116202 | YesWiki before 4.7.0 Stored XSS via ImageField SVG UploadYesWiki · yeswiki | Medium5.1 |
| CVE-2026-105224 | YesWiki before 4.6.7 Stored XSS via Bazar valeur ActionYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104473 | YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpagesYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104472 | YesWiki before 4.6.7 Missing Authorization via Attachment Download HandlerYesWiki · yeswiki | High8.7 |
| CVE-2026-104471 | YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV ImportYesWiki · yeswiki | High8.6 |
| CVE-2026-104470 | YesWiki before 4.6.7 SSRF via Bazar valeur Action url ParameterYesWiki · yeswiki | Medium5.3 |
| CVE-2026-104469 | YesWiki before 4.6.7 Session Fixation via Login in AuthController.phpYesWiki · yeswiki | High7.6 |
| CVE-2026-104468 | YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordActionYesWiki · yeswiki | Medium6.3 |
| CVE-2026-104467 | YesWiki before 4.6.7 Authorization Bypass via Public API ModeYesWiki · yeswiki | Critical9.2 |
| CVE-2026-104466 | YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src AttributeYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104465 | YesWiki before 4.6.7 Reflected XSS via field Parameter in mail HandlerYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104464 | YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameterYesWiki · yeswiki | High8.8 |
| CVE-2026-104463 | YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub InboxYesWiki · yeswiki | High8.3 |
| CVE-2026-104462 | YesWiki before 4.6.7 SQL Injection via nuagetag tags parameterYesWiki · yeswiki | High8.8 |
| CVE-2026-104461 | YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileFieldYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104460 | YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearchYesWiki · yeswiki | High8.7 |
| CVE-2026-104459 | YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handleYesWiki · yeswiki | Medium6.9 |
| CVE-2026-104458 | YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition AddressesYesWiki · yeswiki | High8.3 |
| CVE-2026-104457 | YesWiki before 4.6.7 SQL Injection via filtertags filterN parameterYesWiki · yeswiki | High8.8 |
| CVE-2026-104456 | YesWiki before 4.6.7 Second-Order SQL Injection via ACL UsernameYesWiki · yeswiki | High7.2 |
| CVE-2026-104455 | YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS ActionYesWiki · yeswiki | Medium6.9 |
| CVE-2026-104454 | YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview EndpointYesWiki · yeswiki | Medium6.9 |
| CVE-2026-104453 | YesWiki before 4.6.7 CSRF Tag Deletion via admintag ActionYesWiki · yeswiki | Medium5.3 |
| CVE-2026-104452 | YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager HandlerYesWiki · yeswiki | Medium5.3 |
| CVE-2026-104451 | YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandlerYesWiki · yeswiki | Medium5.3 |
| CVE-2026-104450 | YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage ActionYesWiki · yeswiki | High8.2 |
| CVE-2026-104449 | YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_ficheYesWiki · yeswiki | High8.3 |
| CVE-2026-104448 | YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage HandlerYesWiki · yeswiki | High7.2 |
| CVE-2026-104447 | YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateActionYesWiki · yeswiki | High7.1 |
| CVE-2026-104446 | YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail HandlerYesWiki · yeswiki | Medium6.9 |
| CVE-2026-104445 | YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor SpoofingYesWiki · yeswiki | High8.8 |
| CVE-2026-104444 | YesWiki before 4.6.7 Authorization Bypass via Comments API editCommentYesWiki · yeswiki | High7.1 |
| CVE-2026-104443 | YesWiki before 4.6.7 Scope Bypass via Triples Delete APIYesWiki · yeswiki | High7.2 |
| CVE-2026-104442 | YesWiki before 4.6.7 Unauthenticated SSRF via syndication ActionYesWiki · yeswiki | Medium6.9 |