Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 401,792All CVEsplus 19,141 rejected
- 598Last 24 hours3,086 in the last 7 days
- 17,125Last 30 days1,603 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 5 | 0 | 0 | 8 | 18 |
| 2025 | 2 | 2 | 3 | 0 | 0 | 7 | 10 |
| 2024 | 0 | 0 | 3 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-116537 | Link Library <= 7.10.0 - Unauthenticated Stored Cross-Site Scripting via 'link_description' Parameterjackdewey · Link Library | High7.2 |
| CVE-2026-15090 | Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameterjackdewey · Link Library | High7.5 |
| CVE-2026-18855 | Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameterjackdewey · Link Library | Critical9.1 |
| CVE-2026-2429 | Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Fieldjackdewey · Community Events | Medium4.9 |
| CVE-2026-1649 | Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameterjackdewey · Community Events | Medium4.4 |
| CVE-2026-1252 | Events Listing Widget <= 1.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Fieldjackdewey · Events Listing Widget | Medium6.4 |
| CVE-2026-1401 | Tune Library <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Importjackdewey · Tune Library | Medium6.4 |
| CVE-2025-14029 | Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameterjackdewey · Community Events | Medium5.3 |
| CVE-2025-12646 | Community Events <= 1.5.4 - Unauthenticated SQL Injectionjackdewey · Community Events | High7.5 |
| CVE-2025-11995 | Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scriptingjackdewey · Community Events | High7.2 |
| CVE-2025-10586 | Community Events <= 1.5.1 - Unauthenticated SQL Injectionjackdewey · Community Events | Critical9.8 |
| CVE-2025-10587 | Community Events <= 1.5.1 - Unauthenticated SQL Injectionjackdewey · Community Events | Critical9.8 |
| CVE-2025-2889 | Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parametersjackdewey · Link Library | Medium6.4 |
| CVE-2024-13441 | Bilingual Linker <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingjackdewey · Bilingual Linker | Medium6.4 |
| CVE-2024-13404 | Link Library <= 7.7.2 - Reflected Cross-Site Scriptingjackdewey · Link Library | Medium6.1 |
| CVE-2024-4281 | Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcodejackdewey · Link Library | Medium6.4 |
| CVE-2024-2325 | Link Library <= 7.6.6 - Reflected Cross-Site Scriptingjackdewey · Link Library | Medium6.1 |
| CVE-2024-1559 | Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scriptingjackdewey · Link Library | Medium6.5 |