Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,955All CVEsplus 19,141 rejected
  • 329Last 24 hours3,207 in the last 7 days
  • 16,997Last 30 days1,575 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260020028
20250000006
20240000006
20230000006
20222310066

Latest CVEs

8 CVEs, newest first

CVEs, newest first
Title
CVE-2026-96777
Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injectionPublic exploitForma · LMS
Medium5.3
CVE-2020-36998
forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site ScriptingPublic exploitforma · E-Learning Suite
Medium5.1
CVE-2022-41679
Cross-site scripting in Forma LMS versionForma · Forma LMS
Medium4.7
CVE-2022-42924
SQL injection in Forma LMSForma · Forma LMS
High7.6
CVE-2022-41681
File Upload vulnerability in Forma LMSForma · Forma LMS
Critical9.9
CVE-2022-41680
SQL Injection in Forma LMSForma · Forma LMS
High7.6
CVE-2022-42925
Unrestricted Upload of File with Dangerous Type in Forma LMSForma · Forma LMS
Critical9.9
CVE-2022-42923
SQL injection in Forma LMSForma · Forma LMS
High8.3