Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,903All CVEsplus 19,118 rejected
- 374Last 24 hours2,802 in the last 7 days
- 16,790Last 30 days1,548 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 7 | 0 | 0 | 8 | 14 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 6 |
| 2024 | 1 | 3 | 0 | 0 | 0 | 4 | 6 |
| 2023 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-76805 | Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Modeprojectdiscovery · nuclei | Medium5.3 |
| CVE-2026-76802 | Nuclei: Arbitrary Command Execution via DAST Code Signature Bypassprojectdiscovery · nuclei | Medium4.7 |
| CVE-2026-76804 | Nuclei: Local File Read via Workflow File-Protocol Gate Bypassprojectdiscovery · nuclei | Medium5.5 |
| CVE-2026-76803 | Nuclei: Local File Read via MySQL Client Sandbox Bypassprojectdiscovery · nuclei | Medium5.3 |
| CVE-2026-92718 | Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cacheprojectdiscovery · nuclei | High7.0 |
| CVE-2026-41645 | Nuclei: Environment variable disclosure via Response-Derived DSL Expressionsprojectdiscovery · nuclei | Medium5.3 |
| CVE-2026-41646 | Nuclei: Local File Read via require() Module Loader Bypassprojectdiscovery · nuclei | Medium5.5 |
| CVE-2026-41282 | ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not…ProjectDiscovery · Nuclei | Medium4.0 |
| CVE-2024-43405 | Nuclei Template Signature Verification Bypassprojectdiscovery · nuclei | High7.4 |
| CVE-2024-40641 | Unsigned code template execution through workflows in projectdiscovery/nucleiprojectdiscovery · nuclei | High7.4 |
| CVE-2024-5262 | ProjectDiscovery Interactsh - Files or Directories Accessible to External PartiesProjectDiscovery · Interactsh | Critical9.3 |
| CVE-2024-27920 | Unsigned code template execution through workflows in projectdiscovery/nucleiprojectdiscovery · nuclei | High7.4 |
| CVE-2023-37896 | Nuclei Path Traversal vulnerabilityprojectdiscovery · nuclei | High7.5 |
| CVE-2023-36474 | Interactsh server settings make users vulnerable to Subdomain Takeoverprojectdiscovery · interactsh | High8.2 |