Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,167All CVEsplus 19,120 rejected
- 474Last 24 hours2,785 in the last 7 days
- 16,854Last 30 days1,538 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 6 | 0 | 0 | 6 | 27 |
| 2025 | 1 | 1 | 2 | 0 | 0 | 4 | 21 |
| 2024 | 4 | 0 | 3 | 0 | 0 | 7 | 17 |
| 2023 | 0 | 6 | 3 | 1 | 0 | 10 | 10 |
| Title | ||
|---|---|---|
| CVE-2026-104126 | JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocationjumpserver · jumpserver | Medium6.0 |
| CVE-2026-44846 | JumpServer: Privilege Overwrite via Organization Invite Logic Flawjumpserver · jumpserver | Medium6.2 |
| CVE-2026-44845 | JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deploymentjumpserver · jumpserver | Medium6.7 |
| CVE-2026-54336 | JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Assetjumpserver · jumpserver | Medium5.4 |
| CVE-2026-31864 | JumpServer has a Server-Side Template Injection Leading to RCE via YAML Renderingjumpserver · jumpserver | Medium6.8 |
| CVE-2026-31798 | JumpServer Improper Certificate Validation in Custom SMS API Clientjumpserver · jumpserver | Medium5.0 |
| CVE-2025-58044 | JumpServer has an Open Redirect Vulnerabilityjumpserver · jumpserver | Medium5.5 |
| CVE-2025-62795 | JumpServer Unauthorized LDAP Configuration Access via WebSocketjumpserver · jumpserver | High7.1 |
| CVE-2025-62712 | JumpServer Connection Token Leak Vulnerabilityjumpserver · jumpserver | Critical9.6 |
| CVE-2025-27095 | JumpServer has a Kubernetes Token Leak Vulnerabilityjumpserver · jumpserver | Medium4.3 |
| CVE-2024-40628 | Arbitrary File Read in Ansible Playbooks in Jumpserverjumpserver · jumpserver | Critical10.0 |
| CVE-2024-40629 | Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserverjumpserver · jumpserver | Critical10.0 |
| CVE-2024-29202 | JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celeryjumpserver · jumpserver | Critical10.0 |
| CVE-2024-29201 | JumpServer's insecure Ansible playbook validation leads to RCE in Celeryjumpserver · jumpserver | Critical10.0 |
| CVE-2024-29020 | JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leakedjumpserver · jumpserver | Medium4.6 |
| CVE-2024-29024 | JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionalityjumpserver · jumpserver | Medium4.6 |
| CVE-2024-24763 | JumpServer Open Redirect Vulnerabilityjumpserver · jumpserver | Medium4.3 |
| CVE-2023-46138 | JumpServer default admin user email leak password resetjumpserver · jumpserver | Low3.7 |
| CVE-2023-46123 | jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP valuesjumpserver · jumpserver | Medium5.3 |
| CVE-2023-42818 | SSH public key login without private key challenge if mfa is enabled in jumpserverjumpserver · jumpserver | Medium5.4 |
| CVE-2023-43651 | Remote code execution on the host system via MongoDB shell in jumpserverjumpserver · jumpserver | High8.6 |
| CVE-2023-43650 | Non-MFA account takeover via brute-force attack on weak password reset code in jumpserverjumpserver · jumpserver | High8.2 |
| CVE-2023-43652 | Non-MFA account takeover via using only SSH public key to login in jumpserverjumpserver · jumpserver | High8.2 |
| CVE-2023-42819 | Path traversal in Jumpserverjumpserver · jumpserver | High8.9 |
| CVE-2023-42820 | Random seed leakage in Jumpserverjumpserver · jumpserver | High7.0 |
| CVE-2023-42442 | JumpServer session replays download without authenticationjumpserver · jumpserver | High8.2 |
| CVE-2023-28110 | JumpServer Koko vulnerable to Command Injection for Kubernetes Connectionjumpserver · jumpserver | Medium5.7 |