Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 452Last 24 hours2,722 in the last 7 days
- 16,914Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 4 | 2 | 0 | 6 | 16 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 10 |
| 2024 | 2 | 0 | 1 | 0 | 0 | 3 | 10 |
| 2023 | 2 | 1 | 2 | 0 | 0 | 5 | 7 |
| 2022 | 0 | 0 | 1 | 1 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-59941 | Dompdf: Uncontrolled resource consumption based on declared BMP dimensionsdompdf · dompdf | Medium6.3 |
| CVE-2026-59942 | Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmapsdompdf · dompdf | Medium6.3 |
| CVE-2026-59943 | Dompdf: Embedded SVG images can leak existence of files and directories within the filesystemdompdf · dompdf | Medium6.3 |
| CVE-2026-56722 | Dompdf: Local file read due to improper file path validation in SVG images encoded as data-URIdompdf · dompdf | Medium6.3 |
| CVE-2026-55554 | Dompdf: Chroot Validation Bypassdompdf · dompdf | Low2.3 |
| CVE-2026-55555 | Dompdf: File existence oracle via font-face stylesheet declarationdompdf · dompdf | Low2.3 |
| CVE-2021-3902 | Improper Restriction of XML External Entity Reference in dompdf/dompdfdompdf · dompdf/dompdf | Critical9.8 |
| CVE-2021-3838 | PHAR Deserialization in dompdf/dompdfdompdf · dompdf/dompdf | Critical9.8 |
| CVE-2024-25117 | php-svg-lib lacks path validation on font through SVG inline stylesdompdf · php-svg-lib | Medium6.8 |
| CVE-2023-50262 | Dompdf possible DoS caused by infinite recursion when parsing SVG imagesdompdf · dompdf | Medium5.3 |
| CVE-2023-50252 | php-svg-lib unsafe attributes merge when parsing `use` tagdompdf · php-svg-lib | High8.3 |
| CVE-2023-50251 | php-svg-lib possible DoS caused by infinite recursion when parsing SVG documentdompdf · php-svg-lib | Medium5.3 |
| CVE-2023-24813 | URI validation failure on SVG parsing. Bypass of CVE-2023-23924dompdf · dompdf | Critical10.0 |
| CVE-2023-23924 | URI validation failure on SVG parsing in Dompdfdompdf · dompdf | Critical10.0 |
| CVE-2022-2400 | External Control of File Name or Path in dompdf/dompdfdompdf · dompdf/dompdf | Medium5.3 |
| CVE-2022-0085 | Server-Side Request Forgery (SSRF) in dompdf/dompdfdompdf · dompdf/dompdf | Low3.7 |