Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,974All CVEsplus 19,118 rejected
- 407Last 24 hours2,833 in the last 7 days
- 16,804Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 10 | 6 | 6 | 2 | 24 | 37 |
| 2025 | 0 | 3 | 3 | 0 | 0 | 6 | 13 |
| 2024 | 0 | 1 | 2 | 0 | 0 | 3 | 7 |
| 2023 | 0 | 2 | 1 | 0 | 0 | 3 | 4 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-57199 | Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffersasterisk · asterisk | Low2.3 |
| CVE-2026-57203 | Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper locationasterisk · asterisk | Medium6.9 |
| CVE-2026-57190 | Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Fieldasterisk · asterisk | High7.0 |
| CVE-2026-57191 | Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsingasterisk · asterisk | High8.2 |
| CVE-2026-57192 | Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatchasterisk · asterisk | Medium6.0 |
| CVE-2026-57186 | Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parserasterisk · asterisk | High7.5 |
| CVE-2026-57200 | Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCEasterisk · asterisk | High7.5 |
| CVE-2026-57195 | Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authenticationasterisk · asterisk | High7.5 |
| CVE-2026-57202 | Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writesasterisk · asterisk | High8.1 |
| CVE-2026-57188 | Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlingasterisk · asterisk | High7.1 |
| CVE-2026-57189 | Asterisk: Possible RED T.140 Generation Accumulation OOB Writeasterisk · asterisk | Low2.3 |
| CVE-2026-57201 | Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Bufferasterisk · asterisk | High7.5 |
| CVE-2026-57194 | Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asteriskasterisk · asterisk | Medium5.9 |
| CVE-2026-57198 | Asterisk: Possible RED T.140 Heap Buffer Overflowasterisk · asterisk | Low2.3 |
| CVE-2026-57185 | Asterisk: Buffer over-read in Asterisk PJSIP MWI body parserasterisk · asterisk | Medium6.5 |
| CVE-2026-57197 | Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)asterisk · asterisk | High7.7 |
| CVE-2026-57184 | Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)asterisk · asterisk | Medium6.3 |
| CVE-2026-57193 | Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)asterisk · asterisk | Medium6.9 |
| CVE-2026-57187 | Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processingasterisk · asterisk | High7.1 |
| CVE-2026-57196 | Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pagesasterisk · asterisk | Low2.3 |
| CVE-2026-23741 | ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalationasterisk · asterisk | None0.0 |
| CVE-2026-23740 | Asterisk vulnerable to potential privilege escalationasterisk · asterisk | None0.0 |
| CVE-2026-23739 | Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injectionasterisk · asterisk | Low2.0 |
| CVE-2026-23738 | The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitizationasterisk · asterisk | Low3.5 |
| CVE-2025-1131 | Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege EscalationAsterisk · Asterisk | High7.0 |
| CVE-2025-57767 | Asterisk can crash from a specifically malformed Authorization header in an incoming SIP requestasterisk · asterisk | High7.5 |
| CVE-2025-54995 | Asterisk remotely exploitable leak of RTP UDP ports and internal resourcesasterisk · asterisk | Medium6.5 |
| CVE-2025-49832 | Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocationasterisk · asterisk | Medium6.5 |
| CVE-2025-47780 | cli_permissions.conf: deny option does not work for disallowing shell commandsasterisk · asterisk | Medium4.8 |
| CVE-2025-47779 | Using malformed From header can forge identity with ";" or NULL in name portionasterisk · asterisk | High7.7 |
| CVE-2024-42491 | A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is usedasterisk · asterisk | Medium5.7 |
| CVE-2024-42365 | Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplanasterisk · asterisk | High7.4 |
| CVE-2024-35190 | Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requestsasterisk · asterisk | Medium5.8 |
| CVE-2023-49786 | Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiationasterisk · asterisk | High7.5 |
| CVE-2023-37457 | Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'asterisk · asterisk | High7.5 |
| CVE-2023-49294 | Asterisk Path Traversal vulnerabilityasterisk · asterisk | Medium4.9 |
| CVE-2009-3723 | asterisk allows calls on prohibited networksasterisk · asterisk | High7.5 |