Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,310All CVEsplus 19,140 rejected
- 462Last 24 hours2,731 in the last 7 days
- 16,922Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 9 | 8 | 2 | 2 | 25 | 40 |
| 2025 | 0 | 6 | 6 | 3 | 0 | 15 | 15 |
| Title | ||
|---|---|---|
| CVE-2026-73848 | Emlog: Stored XSS via Tag Name in Article Editoremlog · emlog | Medium6.9 |
| CVE-2026-53757 | Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCEemlog · emlog | Medium6.9 |
| CVE-2026-53758 | Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitizedemlog · emlog | High8.7 |
| CVE-2026-53756 | Emlog Blind SQL Injection via Authentication Cookieemlog · emlog | Medium4.9 |
| CVE-2026-73850 | Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Functionemlog · emlog | High8.6 |
| CVE-2026-73849 | emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.emlog · emlog | Critical9.8 |
| CVE-2026-73847 | Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeoveremlog · emlog | Medium6.8 |
| CVE-2026-67598 | Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.phpemlog · emlog | Critical9.1 |
| CVE-2026-46687 | Emlog Local File Inclusion (LFI)emlog · emlog | High7.7 |
| CVE-2026-46686 | Emlog Reflected Cross-Site Scriptingemlog · emlog | High8.5 |
| CVE-2026-42287 | Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functionsemlog · emlog | Critical10.0 |
| CVE-2026-42286 | Emlog: Cross-Site Request Forgery in Admin Functionsemlog · emlog | High8.4 |
| CVE-2026-41517 | Emlog: Remote Code Execution via Malicious Plugin Uploademlog · emlog | None0.0 |
| CVE-2026-34788 | Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parametersemlog · emlog | Medium6.5 |
| CVE-2026-34787 | Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameteremlog · emlog | Medium6.5 |
| CVE-2026-34607 | Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCEemlog · emlog | High7.2 |
| CVE-2026-34229 | Emlog: Stored XSS in Comment Module via URI Scheme Validation Bypassemlog · emlog | Medium6.1 |
| CVE-2026-34228 | Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Writeemlog · emlog | High8.7 |
| CVE-2026-31954 | Emlog asynchronous media file deletion missing CSRF protectionemlog · emlog | None0.0 |
| CVE-2026-22799 | emlog Arbitrary File Upload Vulnerabilityemlog · emlog | Critical9.3 |
| CVE-2026-21433 | Emlog vulnerable to Server-Side Request Forgery (SSRF)emlog · emlog | High7.7 |
| CVE-2026-21432 | Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATOemlog · emlog | Medium6.8 |
| CVE-2026-21431 | Emlog vulnerable to stored Cross-site Scripting via image nameemlog · emlog | Low2.0 |
| CVE-2026-21430 | Emlog: CSRF chained with stored XSS leads to ATOemlog · emlog | High7.0 |
| CVE-2026-21429 | Emlog has Broken Access Control (BAC)emlog · emlog | Low2.0 |
| CVE-2025-62717 | Emlog Pro session verification code error due to clearing logic erroremlog · emlog | Low2.7 |
| CVE-2025-61930 | Emlog Pro has CSRF issue that Enables Admin Password Resetemlog · emlog | High8.1 |
| CVE-2025-61769 | Emlog vulnerable to stored XSS in file upload functionality in emlogemlog · emlog | Low2.1 |
| CVE-2025-61599 | Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Inputemlog · emlog | Medium5.1 |
| CVE-2025-61597 | Emlog Pro is vulnerable to stored XSS attack through HTML template injectionemlog · emlog | High7.6 |
| CVE-2025-53926 | Emlog has Stored Cross-site Scripting vulnerability due to erroremlog · emlog | Medium6.1 |
| CVE-2025-53925 | Emlog has Stored Cross-site Scripting vulnerability in file upload functionalityemlog · emlog | Medium5.4 |
| CVE-2025-53924 | Emlog vulnerable to stored Cross-site Scripting in links functionalityemlog · emlog | Medium6.9 |
| CVE-2025-53923 | Emlog vulnerable to reflected Cross-site Scripting in admin panelemlog · emlog | High8.2 |
| CVE-2025-5119 | Emlog Pro api_controller.php sql injectionEmlog · Pro | Medium6.9 |
| CVE-2025-47786 | Emlog vulnerable to Stored Cross-site Scriptingemlog · emlog | Low1.9 |
| CVE-2025-47785 | EMLOG SQL Injection Vulnerabilityemlog · emlog | High8.3 |
| CVE-2025-47787 | Emlog Pro Contains a File Upload Vulnerabilityemlog · emlog | High8.9 |
| CVE-2025-47784 | Emlog vulnerable to Deserialization of Untrusted Dataemlog · emlog | Medium6.6 |
| CVE-2025-30372 | Emlog Pro contains an SQL injection vulnerability.emlog · emlog | High7.7 |