Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,974All CVEsplus 19,118 rejected
- 407Last 24 hours2,833 in the last 7 days
- 16,801Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 8 | 0 | 0 | 12 | 30 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 18 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 18 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 18 |
| 2022 | 8 | 8 | 2 | 0 | 0 | 18 | 18 |
| Title | ||
|---|---|---|
| CVE-2026-114402 | Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Uploadpolonel · trudesk | Medium5.3 |
| CVE-2026-114401 | Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/loginpolonel · trudesk | Medium6.9 |
| CVE-2026-114400 | Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploadspolonel · trudesk | High8.2 |
| CVE-2026-114399 | Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore APIpolonel · trudesk | High7.0 |
| CVE-2026-114398 | Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogopolonel · trudesk | Medium5.1 |
| CVE-2026-114397 | Trudesk through 1.2.11 Missing Authentication on Debug Routespolonel · trudesk | High8.3 |
| CVE-2026-114396 | Trudesk through 1.2.11 MongoDB $where Injection via tickets search APIpolonel · trudesk | High7.1 |
| CVE-2026-114395 | Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/sendpolonel · trudesk | Medium5.3 |
| CVE-2026-114394 | Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIspolonel · trudesk | Medium5.3 |
| CVE-2026-114393 | Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpointspolonel · trudesk | Medium5.3 |
| CVE-2026-114392 | Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uidpolonel · trudesk | Medium6.9 |
| CVE-2026-111345 | Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:idpolonel · trudesk | Medium5.3 |
| CVE-2022-2128 | Unrestricted Upload of File with Dangerous Type in polonel/trudeskpolonel · polonel/trudesk | Critical9.6 |
| CVE-2022-2023 | Incorrect Use of Privileged APIs in polonel/trudeskpolonel · polonel/trudesk | Critical10.0 |
| CVE-2022-1947 | Use of Incorrect Operator in polonel/trudeskpolonel · polonel/trudesk | Critical9.1 |
| CVE-2022-1808 | Execution with Unnecessary Privileges in polonel/trudeskpolonel · polonel/trudesk | High8.8 |
| CVE-2022-1893 | Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudeskpolonel · polonel/trudesk | Medium4.6 |
| CVE-2022-1926 | Integer Overflow or Wraparound in polonel/trudeskpolonel · polonel/trudesk | High7.6 |
| CVE-2022-1931 | Incorrect Synchronization in polonel/trudeskpolonel · polonel/trudesk | Critical9.1 |
| CVE-2022-1752 | Unrestricted Upload of File with Dangerous Type in polonel/trudeskpolonel · polonel/trudesk | Critical9.0 |
| CVE-2022-1775 | Weak Password Requirements in polonel/trudeskpolonel · polonel/trudesk | High8.4 |
| CVE-2022-1803 | Improper Restriction of Rendered UI Layers or Frames in polonel/trudeskpolonel · polonel/trudesk | High8.4 |
| CVE-2022-1770 | Improper Privilege Management in polonel/trudeskpolonel · polonel/trudesk | Critical9.9 |
| CVE-2022-1754 | Integer Overflow or Wraparound in polonel/trudeskpolonel · polonel/trudesk | High8.4 |
| CVE-2022-1728 | Allowing long password leads to denial of service in polonel/trudesk in polonel/trudeskpolonel · polonel/trudesk | High7.6 |
| CVE-2022-1718 | The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudeskpolonel · polonel/trudesk | High7.2 |
| CVE-2022-1719 | Reflected XSS on ticket filter function in polonel/trudeskpolonel · polonel/trudesk | Medium5.5 |
| CVE-2022-1044 | Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudeskpolonel · polonel/trudesk | High8.2 |
| CVE-2022-1045 | Stored XSS viva .svg file upload in polonel/trudeskpolonel · polonel/trudesk | Critical9.0 |
| CVE-2022-1290 | Stored XSS in "Name", "Group Name" & "Title" in polonel/trudeskpolonel · polonel/trudesk | Critical9.0 |