Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,334All CVEsplus 19,141 rejected
  • 442Last 24 hours2,720 in the last 7 days
  • 16,914Last 30 days1,562 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202602400611
20250000005
20240200025
20230010013
20220000002
20210000002
20200000002
20190000002
20180110022

Latest CVEs

11 CVEs, newest first

CVEs, newest first
Title
CVE-2026-53586
libgit2: HTTP transport can leak credentials to an offsite redirect targetlibgit2 · libgit2
Medium6.5
CVE-2026-53583
libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backendlibgit2 · libgit2
Medium6.5
CVE-2026-53585
libgit2: Unbounded Memory Allocation via Delta Object Result-Size Headerlibgit2 · libgit2
Medium5.3
CVE-2026-53587
libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_datalibgit2 · libgit2
High7.5
CVE-2026-53584
libgit2: Submodule path traversallibgit2 · libgit2
Medium4.3
CVE-2026-5917
libgit2 Shell Command Injection via ssh_libssh2 Backendlibgit2 · libgit2
High8.6
CVE-2024-24577
libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`libgit2 · libgit2
High8.6
CVE-2024-24575
libgit2 is vulnerable to a denial of service attack in `git_revparse_single`libgit2 · libgit2
High7.5
CVE-2023-22742
libgit2 fails to verify SSH keys by defaultlibgit2 · libgit2
Medium5.3
CVE-2018-10888
A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading…libgit2 · libgit2
Medium6.5
CVE-2018-10887
A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may…libgit2 · libgit2
High8.1