Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,113All CVEsplus 19,119 rejected
- 470Last 24 hours2,798 in the last 7 days
- 16,883Last 30 days1,550 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 0 | 0 | 0 | 2 | 20 |
| 2025 | 0 | 0 | 2 | 2 | 0 | 4 | 18 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 14 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 13 |
| 2022 | 0 | 0 | 2 | 0 | 0 | 2 | 13 |
| 2021 | 1 | 2 | 1 | 0 | 0 | 4 | 11 |
| 2020 | 0 | 4 | 3 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-77615 | Paella Player: Stored XSS via caption cue textopencast · opencast | High8.7 |
| CVE-2026-77614 | Opencast: Session fixation in login enables account takeover via crafted linkopencast · opencast | High8.8 |
| CVE-2025-61906 | Opencast's editor accidentally publishes videos/overwrites publications #1626opencast · opencast | Low2.3 |
| CVE-2025-61788 | Opencast Paella Player 7 vulnerable to Cross-Site-Scriptingopencast · opencast | Medium5.1 |
| CVE-2025-55202 | Opencast has a partial path traversal vulnerability in UI configopencast · opencast | Low2.7 |
| CVE-2025-54380 | Opencast still publishes global system account credentialsopencast · opencast | Medium6.5 |
| CVE-2024-52797 | Searching Opencast may cause a denial of serviceopencast · opencast | Medium6.5 |
| CVE-2022-41965 | Opencast Authenticated OpenRedirect Vulnerabilityopencast · opencast | Medium5.7 |
| CVE-2022-29237 | Limited Authentication Bypass for Media Files in Opencastopencast · opencast | Medium5.4 |
| CVE-2021-43821 | Files Accessible to External Parties in Opencastopencast · opencast | Critical9.9 |
| CVE-2021-43807 | HTTP Method Spoofing in Opencastopencast · opencast | High7.5 |
| CVE-2021-32623 | Opencast vulnerable to billion laughs attack (XML bomb)opencast · opencast | High8.1 |
| CVE-2021-21318 | Removing access may not effect published seriesopencast · opencast | Medium5.4 |
| CVE-2020-26234 | Disabled Hostname Verification in OpenCastopencast · opencast | Medium4.8 |
| CVE-2020-5206 | Authentication Bypass For Endpoints With Anonymous Access in OpenCastopencast · opencast | High8.7 |
| CVE-2020-5231 | Opencast users with ROLE_COURSE_ADMIN can create new usersopencast · opencast | Medium4.8 |
| CVE-2020-5230 | Opencast uses unsafe identifiersopencast · opencast | High7.7 |
| CVE-2020-5222 | Hard-Coded Key Used For Remember-me Token in OpenCastopencast · opencast | Medium6.8 |
| CVE-2020-5229 | Opencast stores passwords using outdated MD5 hash algorithmopencast · opencast | High7.7 |
| CVE-2020-5228 | Opencast allows unauthorized public access via OAI-PMHopencast · opencast | High7.6 |