Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,367All CVEsplus 19,141 rejected
- 471Last 24 hours2,753 in the last 7 days
- 16,918Last 30 days1,566 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 1 | 0 | 0 | 2 | 28 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 26 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 26 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 26 |
| 2022 | 0 | 0 | 2 | 0 | 0 | 2 | 26 |
| 2021 | 0 | 1 | 2 | 0 | 0 | 3 | 24 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 21 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 21 |
| 2018 | 0 | 2 | 5 | 0 | 0 | 7 | 21 |
| 2017 | 1 | 10 | 3 | 0 | 0 | 14 | 14 |
| Title | ||
|---|---|---|
| CVE-2026-97150 | When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is…baserCMS Users Community · BcAddonMigrator | High8.6 |
| CVE-2026-65875 | BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code…baserCMS Users Community · BaserCMS | Medium5.1 |
| CVE-2022-42486 | Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an…baserCMS Users Community · baserCMS | Medium4.8 |
| CVE-2022-41994 | Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an…baserCMS Users Community · baserCMS | Medium4.8 |
| CVE-2021-20683 | Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to…baserCMS Users Community · baserCMS | Medium5.4 |
| CVE-2021-20682 | baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.baserCMS Users Community · baserCMS | High7.2 |
| CVE-2021-20681 | Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an…baserCMS Users Community · baserCMS | Medium5.4 |
| CVE-2018-0575 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to…baserCMS Users Community · baserCMS | Medium5.3 |
| CVE-2018-0574 | Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject…baserCMS Users Community · baserCMS | Medium6.1 |
| CVE-2018-0573 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to…baserCMS Users Community · baserCMS | Medium5.3 |
| CVE-2018-0572 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to…baserCMS Users Community · baserCMS | High8.1 |
| CVE-2018-0571 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload…baserCMS Users Community · baserCMS | Medium4.3 |
| CVE-2018-0570 | Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated…baserCMS Users Community · baserCMS | Medium5.4 |
| CVE-2018-0569 | baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands…baserCMS Users Community · baserCMS | High8.8 |
| CVE-2017-10843 | baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being…baserCMS Users Community · baserCMS | High7.5 |
| CVE-2017-10842 | SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified…baserCMS Users Community · baserCMS | Critical9.8 |
| CVE-2016-4887 | Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of…baserCMS Users Community · baserCMS plugin Uploader | High8.8 |
| CVE-2016-4886 | Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of…baserCMS Users Community · baserCMS plugin Mail | High8.8 |
| CVE-2016-4885 | Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of…baserCMS Users Community · baserCMS plugin Feed | High8.8 |
| CVE-2016-4884 | Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of…baserCMS Users Community · baserCMS plugin Blog | High8.8 |
| CVE-2016-4883 | Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified…baserCMS Users Community · baserCMS | Medium5.4 |
| CVE-2016-4882 | Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators…baserCMS Users Community · baserCMS | High8.8 |
| CVE-2016-4881 | Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of…baserCMS Users Community · baserCMS plugin Blog | High8.8 |
| CVE-2016-4880 | Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or…baserCMS Users Community · baserCMS plugin Blog | Medium5.4 |
| CVE-2016-4879 | Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of…baserCMS Users Community · baserCMS plugin Mail | High8.8 |
| CVE-2016-4878 | Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators…baserCMS Users Community · baserCMS | High8.8 |
| CVE-2016-4877 | Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or…baserCMS Users Community · baserCMS plugin Mail | Medium5.4 |
| CVE-2016-4876 | Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators…baserCMS Users Community · baserCMS | High8.8 |