Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,082All CVEsplus 19,119 rejected
- 502Last 24 hours2,856 in the last 7 days
- 16,885Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 2 | 1 | 0 | 0 | 4 | 15 |
| 2025 | 0 | 0 | 3 | 0 | 0 | 3 | 11 |
| 2024 | 0 | 2 | 0 | 0 | 0 | 2 | 8 |
| 2023 | 0 | 1 | 2 | 0 | 0 | 3 | 6 |
| 2022 | 1 | 0 | 1 | 0 | 0 | 2 | 3 |
| 2021 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-11321 | GLPI DataInjection Plugin Authenticated SQL Injection via CSV ImportpluginsGLPI · datainjection | High7.1 |
| CVE-2026-53987 | Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge RenderingpluginsGLPI · tag | High7.3 |
| CVE-2026-23489 | Fields GLPI plugin vulnerable to RCE in dropdown generationpluginsGLPI · fields | Critical9.1 |
| CVE-2026-22821 | mreporting affected by a SQLI on date changepluginsGLPI · mreporting | Medium4.9 |
| CVE-2025-65035 | GLPI Database Inventory Plugin Vulnerable to Stored Object InjectionpluginsGLPI · databaseinventory | Medium6.4 |
| CVE-2025-53360 | pluginsGLPI's Database Inventory Plugin allows any authenticated user to send agent requestspluginsGLPI · databaseinventory | Medium4.3 |
| CVE-2025-27153 | Escalade GLPI Plugin Vulnerable to Improper Access ControlpluginsGLPI · escalade | Medium6.5 |
| CVE-2024-53850 | The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiationpluginsGLPI · addressing | High8.2 |
| CVE-2024-45600 | Fields GLPI plugin has an Authenticated SQL InjectionpluginsGLPI · fields | High7.7 |
| CVE-2023-33971 | Formcreator vulnerable to stored XSS from ##FULLFORM##pluginsGLPI · formcreator | Medium6.1 |
| CVE-2023-29006 | Order GLPI plugin vulnerable to remote code execution from authenticated userpluginsGLPI · order | High8.8 |
| CVE-2023-28855 | Fields GLPI plugin vulnerable to unauthorized write access to additional fieldspluginsGLPI · fields | Medium6.5 |
| CVE-2021-39190 | SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized ActorpluginsGLPI · sccm | Medium5.3 |
| CVE-2021-43779 | Remote Command Execution vulnerabilitypluginsGLPI · addressing | Critical9.9 |
| CVE-2021-43778 | Path traversal in GLPI barcode pluginpluginsGLPI · barcode | Critical9.1 |