Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,807All CVEsplus 19,141 rejected
- 473Last 24 hours3,072 in the last 7 days
- 16,902Last 30 days1,575 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 2 | 0 | 0 | 3 | 14 |
| 2025 | 0 | 1 | 2 | 0 | 0 | 3 | 11 |
| 2024 | 0 | 0 | 2 | 0 | 0 | 2 | 8 |
| 2023 | 0 | 0 | 6 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-120114 | Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpointqriouslad · Debug Log Manager – Conveniently Monitor and Inspect Errors | High7.2 |
| CVE-2026-9016 | Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Actionqriouslad · Debug Log Manager – Conveniently Monitor and Inspect Errors | Medium5.3 |
| CVE-2025-15487 | Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameterqriouslad · Code Explorer | Medium4.9 |
| CVE-2025-10377 | System Dashboard <= 2.8.20 - Cross-Site Request Forgeryqriouslad · System Dashboard | Medium4.3 |
| CVE-2025-3809 | Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scriptingqriouslad · Debug Log Manager – Conveniently Monitor and Inspect Errors | High7.2 |
| CVE-2024-12299 | System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameterqriouslad · System Dashboard | Medium6.1 |
| CVE-2024-10790 | Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVGqriouslad · Admin and Site Enhancements (ASE) | Medium5.4 |
| CVE-2023-5816 | Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Readingqriouslad · Code Explorer | Medium4.9 |
| CVE-2023-5710 | System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)qriouslad · System Dashboard | Medium4.3 |
| CVE-2023-5713 | System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)qriouslad · System Dashboard | Medium4.3 |
| CVE-2023-5712 | System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)qriouslad · System Dashboard | Medium4.3 |
| CVE-2023-5714 | System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)qriouslad · System Dashboard | Medium4.3 |
| CVE-2023-5711 | System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)qriouslad · System Dashboard | Medium4.3 |
| CVE-2023-5772 | Debug Log Manager <= 2.2.0 - Cross-Site Request Forgeryqriouslad · Debug Log Manager – Conveniently Monitor and Inspect Errors | Medium4.3 |