Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,625All CVEsplus 19,141 rejected
- 680Last 24 hours2,965 in the last 7 days
- 17,121Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 7 | 0 | 0 | 12 | 19 |
| 2025 | 1 | 4 | 2 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-40867 | Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulationhorilla-opensource · horilla | High7.1 |
| CVE-2026-40866 | Horilla: Unauthorized Document Overwrite via File Upload Endpointhorilla-opensource · horilla | High8.6 |
| CVE-2026-40865 | Horilla: Insecure Direct Object Reference at `/employee/view-file/<int:id>horilla-opensource · horilla | High7.1 |
| CVE-2026-3050 | horilla-opensource horilla Leads global.js cross site scriptinghorilla-opensource · horilla | Medium5.1 |
| CVE-2026-3049 | horilla-opensource horilla Query Parameter global_search.py get redirecthorilla-opensource · horilla | Medium5.3 |
| CVE-2026-24039 | Horilla's Improper Access Control Allows Employees to Auto-Approve Documentshorilla-opensource · horilla | Medium4.3 |
| CVE-2026-24038 | Horilla HR has 2FA Bypass through its OTP Handling Logichorilla-opensource · horilla | High8.1 |
| CVE-2026-24037 | Horilla HRM has XSS Bypass through Project Namehorilla-opensource · horilla | Medium4.8 |
| CVE-2026-24036 | Horilla Exposes Unpublished Job Disclosures through Unauthenticated APIhorilla-opensource · horilla | Medium5.3 |
| CVE-2026-24035 | Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employeehorilla-opensource · horilla | Medium4.3 |
| CVE-2026-24034 | Horilla has File Upload XSShorilla-opensource · horilla | Medium5.4 |
| CVE-2026-24010 | Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeoverhorilla-opensource · horilla | High8.8 |
| CVE-2025-59832 | Horrila Stored XSS Vulnerability via Ticket Comment sectionhorilla-opensource · horilla | Critical9.9 |
| CVE-2025-59525 | Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeoverhorilla-opensource · horilla | High7.7 |
| CVE-2025-59524 | Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panelhorilla-opensource · horilla | High7.7 |
| CVE-2025-48867 | Horilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Moduleshorilla-opensource · horilla | Medium4.8 |
| CVE-2025-48869 | Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Controlhorilla-opensource · horilla | High7.5 |
| CVE-2025-48868 | Horilla vulnerable to authenticated RCE via eval() in project_bulk_archivehorilla-opensource · horilla | High7.2 |
| CVE-2025-47789 | Horilla Open Redirect Vulnerability in Loginhorilla-opensource · horilla | Medium6.1 |