Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 452Last 24 hours2,722 in the last 7 days
- 16,914Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 1 | 0 | 0 | 1 | 29 |
| 2025 | 0 | 0 | 3 | 0 | 0 | 3 | 28 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 25 |
| 2023 | 0 | 1 | 2 | 0 | 0 | 3 | 25 |
| 2022 | 5 | 0 | 4 | 0 | 0 | 9 | 22 |
| 2021 | 0 | 6 | 5 | 1 | 0 | 12 | 13 |
| 2020 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-35049 | wire-ios has Persistent Remote DoS via Integer Underflowwireapp · wire-ios | Medium6.5 |
| CVE-2025-49846 | wire-ios accidentally logs message contentswireapp · wire-ios | Medium4.1 |
| CVE-2025-48066 | wire-webapp has no database deletion on client logoutwireapp · wire-webapp | Medium6.0 |
| CVE-2025-48061 | wire-webapp Has Insufficient Session Invalidation after User Logoutwireapp · wire-webapp | Medium5.6 |
| CVE-2023-48221 | wire-avs remote format string vulnerabilitywireapp · wire-avs | High7.3 |
| CVE-2023-22737 | wire-server vulnerable to unauthorized removal of Bots from Conversationswireapp · wire-server | Medium6.5 |
| CVE-2022-39380 | wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Renderingwireapp · wire-webapp | Medium5.3 |
| CVE-2022-31122 | Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creationwireapp · wire-server | Critical9.8 |
| CVE-2022-29168 | Cross Site Scripting in Wire Messageswireapp · wire-webapp | Critical9.6 |
| CVE-2022-31009 | DoS vulnerability: Invalid Accent Colorswireapp · wire-ios | Medium5.7 |
| CVE-2022-24799 | Cross Site Scripting in Wire Webappwireapp · wire-webapp | Critical9.6 |
| CVE-2021-41119 | DoS vulnerabiliity in wire-server json parserwireapp · wire-server | Medium5.3 |
| CVE-2022-23610 | Improper Verification of Cryptographic Signature in wire-serverwireapp · wire-server | Critical9.1 |
| CVE-2022-23625 | DoS vulnerability: Malformed Resource Identifierswireapp · wire-ios | Medium6.5 |
| CVE-2021-41193 | Use of Externally-Controlled Format String in wire-avswireapp · wire-avs | Critical9.8 |
| CVE-2022-23605 | Expired Ephemeral Messages not reliably removed in wire-webappwireapp · wire-webapp | Medium4.4 |
| CVE-2021-41100 | Account takeover when having only access to a user's short lived token in wire-serverwireapp · wire-server | High7.4 |
| CVE-2021-41094 | Mandatory encryption at rest can be bypassed (UI) in Wire appwireapp · wire-ios | Medium4.2 |
| CVE-2021-41093 | Account takeover when having only access to a user's short lived tokenwireapp · wire-ios | High7.4 |
| CVE-2021-41101 | CORS `Access-Control-Allow-Origin` settings are too lenientwireapp · wire-server | Medium5.7 |
| CVE-2021-32755 | Certificate pinning is not enforced on the web socket connectionwireapp · wire-ios-transport | Medium5.4 |
| CVE-2021-32683 | XSS through createObjectURLwireapp · wire-webapp | High8.8 |
| CVE-2021-21382 | Unsafe loopback forwarding interface in Restundwireapp · restund | High8.6 |
| CVE-2021-32666 | Asset DoS vulnerabilitywireapp · wire-ios | Medium6.5 |
| CVE-2021-32665 | Verified groups not reliablewireapp · wire-ios | High8.8 |
| CVE-2021-21400 | Entering code in App Lock modal sends input to conversationwireapp · wire-webapp | High7.1 |
| CVE-2021-21396 | Bulk list client endpoint exposes too much metadata about a clientwireapp · wire-server | Medium6.5 |
| CVE-2021-21301 | Video feed was captured while user has disabled videowireapp · wire-ios | Low2.6 |
| CVE-2020-15258 | Insecure use of shell.openExternal in Wirewireapp · wire-desktop | High8.0 |