Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,082All CVEsplus 19,119 rejected
- 502Last 24 hours2,856 in the last 7 days
- 16,885Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 1 | 7 | 1 | 0 | 14 | 15 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2023 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-119419 | CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collationcakephp · cakephp | Critical9.2 |
| CVE-2026-119418 | CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()cakephp · cakephp | Critical9.2 |
| CVE-2026-119417 | CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransportcakephp · cakephp | Medium6.3 |
| CVE-2026-119416 | CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matchingcakephp · cakephp | Medium6.3 |
| CVE-2026-119415 | CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Typecakephp · cakephp | Medium6.3 |
| CVE-2026-79752 | CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injectioncakephp · cakephp | Critical9.2 |
| CVE-2026-54713 | CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisionscakephp · queue | Low3.7 |
| CVE-2026-54614 | DebugKit: MailPreview contains unsafe reflectioncakephp · debug_kit | Medium4.3 |
| CVE-2026-77337 | CakePHP: Potential Authentication bypass with CookieAuthenticatorcakephp · authentication | Critical9.1 |
| CVE-2026-77634 | CakePHP: SmtpTransport vulnerable to CRLF header injectioncakephp · cakephp | High8.2 |
| CVE-2026-77635 | CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDrivercakephp · cakephp | Critical9.2 |
| CVE-2026-55590 | CakePHP: Open redirect weakness via backslash bypasscakephp · authentication | Medium5.1 |
| CVE-2026-48820 | CakePHP: View::element() is missing a path containment checkcakephp · cakephp | Medium6.3 |
| CVE-2026-23643 | CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scriptingcakephp · cakephp | Medium5.4 |
| CVE-2023-22727 | Database Query::offset() and limit() vulnerable to SQL injection in cakephpcakephp · cakephp | Critical9.8 |