Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,084All CVEsplus 19,119 rejected
- 504Last 24 hours2,858 in the last 7 days
- 16,887Last 30 days1,553 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 9 | 6 | 0 | 0 | 18 | 42 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 24 |
| 2024 | 0 | 1 | 6 | 0 | 0 | 7 | 24 |
| 2023 | 2 | 0 | 5 | 0 | 0 | 7 | 17 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 10 |
| 2021 | 1 | 2 | 0 | 0 | 0 | 3 | 9 |
| 2020 | 0 | 6 | 0 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-115457 | baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Commentsbaserproject · basercms | High7.1 |
| CVE-2026-114624 | baserCMS: PHP object injection via unguarded unserialize() in the widget-area entitybaserproject · basercms | High7.2 |
| CVE-2026-114623 | baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosurebaserproject · basercms | Medium6.5 |
| CVE-2026-114622 | baserCMS: Encoded path traversal bypass in the theme file APIbaserproject · basercms | High7.2 |
| CVE-2026-114621 | baserCMS: SQL injection in the admin panel and admin APIbaserproject · basercms | High8.8 |
| CVE-2026-115480 | baserCMS: Public Web API mail-form submission bypasses image CAPTCHAbaserproject · basercms | Medium5.3 |
| CVE-2026-115479 | baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipientsbaserproject · basercms | Medium5.3 |
| CVE-2026-115481 | baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file uploadbaserproject · basercms | High8.5 |
| CVE-2026-76635 | baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.phpbaserproject · basercms | High8.6 |
| CVE-2026-32734 | baserCMS: Multiple vulnerabilities in baserCMSbaserproject · basercms | High7.1 |
| CVE-2026-30879 | baserCMS: Cross-site scripting vulnerability in blog postbaserproject · basercms | Medium6.9 |
| CVE-2026-30940 | baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCEbaserproject · basercms | High7.2 |
| CVE-2026-30878 | baserCMS: Mail Form Acceptance Bypass via Public APIbaserproject · basercms | Medium5.3 |
| CVE-2026-30877 | baserCMS: OS Command Injection in the baserCMS Update Functionalitybaserproject · basercms | Critical9.1 |
| CVE-2026-30880 | baserCMS: OS command injection vulnerability in installerbaserproject · basercms | Critical9.2 |
| CVE-2026-27697 | baserCMS: SQL injection vulnerability in blog postbaserproject · basercms | Medium6.9 |
| CVE-2026-21861 | baserCMS: OS Command Injection Leading to Remote Code Execution (RCE)baserproject · basercms | Critical9.1 |
| CVE-2025-32957 | baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)baserproject · basercms | High8.7 |
| CVE-2024-46998 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Featurebaserproject · basercms | High7.1 |
| CVE-2024-46996 | baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Featurebaserproject · basercms | Medium6.3 |
| CVE-2024-46995 | baserCMS has Cross-site Scripting Vulnerability in HTTP 400 Bad Requestbaserproject · basercms | Medium6.1 |
| CVE-2024-46994 | baserCMS has Cross-site Scripting Vulnerability in Blog posts and Contents list Featurebaserproject · basercms | Medium5.4 |
| CVE-2024-26128 | baserCMS Cross-site Scripting vulnerability in Content Managementbaserproject · basercms | Medium5.4 |
| CVE-2023-51450 | baserCMS OS command injection vulnerability in Installerbaserproject · basercms | Medium5.6 |
| CVE-2023-44379 | baserCMS Cross-site Scripting vulnerability in Site search Featurebaserproject · basercms | Medium6.1 |
| CVE-2023-43792 | baserCMS Code Injection Vulnerability in Mail Form Featurebaserproject · basercms | Medium5.3 |
| CVE-2023-43649 | baserCMS CSRF vulnerability in Content preview Featurebaserproject · basercms | Medium4.7 |
| CVE-2023-43648 | baserCMS Directory Traversal vulnerability in Form submission data management Featurebaserproject · basercms | Medium4.9 |
| CVE-2023-43647 | baserCMS Cross-site Scripting vulnerability in File upload Featurebaserproject · basercms | Medium6.1 |
| CVE-2023-29009 | basercms XSS Vulnerability via Favorites Featurebaserproject · basercms | Medium6.1 |
| CVE-2023-25655 | baserCMS allows any file to be uploadedbaserproject · basercms | Critical9.8 |
| CVE-2023-25654 | baserCMS File Uploader Remote Code Execution (RCE) vulnerabilitybaserproject · basercms | Critical9.8 |
| CVE-2022-39325 | Cross-site scripting vulnerability in BaserCMSbaserproject · basercms | Medium4.6 |
| CVE-2021-41279 | Zip Slip Vulnerability in BaserCMSbaserproject · basercms | High7.7 |
| CVE-2021-41243 | OS Command Injection Vulnerability and Potential Zip Slip Vulnerabilitybaserproject · basercms | Critical9.1 |
| CVE-2021-39136 | Cross-site scripting vulnerability in file uploadbaserproject · basercms | High8.7 |
| CVE-2020-15273 | Cross-Site Scripting in baserCMSbaserproject · basercms | High7.3 |
| CVE-2020-15276 | Cross Site Scripting in baserCMSbaserproject · basercms | High7.7 |
| CVE-2020-15277 | Remote Code Execution in baserCMSbaserproject · basercms | High7.2 |
| CVE-2020-15159 | Cross Site Scripting leading to RCE in baserCMSbaserproject · basercms | High7.6 |
| CVE-2020-15155 | Cross-Site Scripting in baserCMSbaserproject · basercms | High7.3 |
| CVE-2020-15154 | Cross Site Scripting in baserCMSbaserproject · basercms | High7.3 |