Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,033All CVEsplus 19,141 rejected
- 242Last 24 hours3,251 in the last 7 days
- 16,909Last 30 days1,563 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 10,310 | 37,704 | 38,174 | 3,599 | 3,369 | 93,156 | 402,033 |
| 2025 | 4,112 | 16,077 | 25,458 | 1,593 | 910 | 48,150 | 308,877 |
| 2024 | 3,797 | 14,238 | 20,399 | 1,473 | 17 | 39,924 | 260,727 |
| 2023 | 3,449 | 10,002 | 13,984 | 1,407 | 5 | 28,847 | 220,803 |
| 2022 | 3,784 | 9,612 | 10,564 | 1,035 | 4 | 24,999 | 191,956 |
| 2021 | 2,539 | 8,322 | 8,645 | 671 | 0 | 20,177 | 166,957 |
| 2020 | 2,641 | 7,534 | 7,664 | 524 | 0 | 18,363 | 146,780 |
| 2019 | 2,561 | 7,062 | 7,310 | 375 | 0 | 17,308 | 128,417 |
| 2018 | 2,530 | 7,395 | 6,336 | 249 | 0 | 16,510 | 111,109 |
| 2017 | 2,116 | 6,601 | 5,690 | 235 | 0 | 14,642 | 94,599 |
| 2016 | 883 | 2,905 | 2,448 | 221 | 0 | 6,457 | 79,957 |
| 2015 | 51 | 2,352 | 3,503 | 588 | 0 | 6,494 | 73,500 |
| 2014 | 27 | 1,926 | 5,318 | 657 | 0 | 7,928 | 67,006 |
| 2013 | 22 | 1,736 | 2,913 | 516 | 0 | 5,187 | 59,078 |
| 2012 | 25 | 1,720 | 3,035 | 508 | 0 | 5,288 | 53,891 |
| 2011 | 4 | 1,785 | 2,101 | 260 | 0 | 4,150 | 48,603 |
| 2010 | 27 | 2,093 | 2,241 | 278 | 0 | 4,639 | 44,453 |
| 2009 | 15 | 2,734 | 2,786 | 197 | 0 | 5,732 | 39,814 |
| 2008 | 19 | 2,854 | 2,613 | 187 | 0 | 5,673 | 34,082 |
| 2007 | 22 | 3,446 | 3,478 | 265 | 0 | 7,211 | 28,409 |
| 2006 | 12 | 2,828 | 3,491 | 554 | 0 | 6,885 | 21,198 |
| 2005 | 26 | 2,594 | 3,498 | 590 | 0 | 6,708 | 14,313 |
| 2004 | 6 | 829 | 630 | 147 | 0 | 1,612 | 7,605 |
| 2003 | 11 | 638 | 501 | 73 | 0 | 1,223 | 5,993 |
| 2002 | 8 | 862 | 705 | 115 | 0 | 1,690 | 4,770 |
| 2001 | 6 | 594 | 578 | 145 | 0 | 1,323 | 3,080 |
| 2000 | 2 | 715 | 564 | 156 | 0 | 1,437 | 1,757 |
| 1999 | 3 | 172 | 121 | 24 | 0 | 320 | 320 |
| Title | ||
|---|---|---|
| CVE-2026-124553 | BabelDOC from 0.3.61 before 0.7.0 Denial of Service via ToUnicode CMap Parsingfunstory-ai · BabelDOC | High8.7 |
| CVE-2026-124552 | Webmin through 2.670 Stored XSS via Shorewall and Shorewall6 list.cgiwebmin · webmin | Medium4.8 |
| CVE-2026-124551 | ClassroomIO through 1.0.0 Cross-Organization Course Disclosure via Clone Endpointclassroomio · classroomio | Medium6.0 |
| CVE-2026-124474 | MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.phpmeeting-room-booking-system · mrbs-code | Medium5.3 |
| CVE-2026-124465 | Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer PanicTrendyol · kafka-konsumer | High7.1 |
| CVE-2026-124331 | Jinher OA ProjectAfficheManage.aspx sql injectionPublic exploitJinher · OA | Medium6.9 |
| CVE-2026-124494 | SunEditor before 3.4.0 Stored XSS via : Entity Sanitizer BypassJiHong88 · suneditor | Critical9.3 |
| CVE-2026-124493 | SunEditor before 3.4.0 Stored XSS via DocumentType Header textContentJiHong88 · suneditor | Critical9.3 |
| CVE-2026-124492 | SunEditor before 3.4.0 Stored XSS via Link Modal Bookmark ListJiHong88 · suneditor | High8.3 |
| CVE-2026-124491 | SunEditor before 3.4.0 Stored XSS via FileUpload Plugin FilenameJiHong88 · suneditor | Medium5.3 |
| CVE-2026-124490 | OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocumentopenemr · openemr | Critical9.4 |
| CVE-2026-124489 | OpenEMR before 8.3.0 Broken Access Control via portal_payment.phpopenemr · openemr | High7.1 |
| CVE-2026-124488 | OpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity Encountersopenemr · openemr | High8.6 |
| CVE-2026-124487 | OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docrefopenemr · openemr | High7.1 |
| CVE-2026-124486 | OpenEMR before 8.3.0 Missing Authorization in Classic Document Controlleropenemr · openemr | High8.7 |
| CVE-2026-124485 | OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents APIopenemr · openemr | High7.1 |
| CVE-2026-124484 | OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIsopenemr · openemr | High8.7 |
| CVE-2026-124483 | OpenEMR before 8.4.0 Improper Authorization via Prescription REST APIopenemr · openemr | High8.7 |
| CVE-2026-124482 | OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient Launchopenemr · openemr | High7.1 |
| CVE-2026-124481 | OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal Paymentsopenemr · openemr | High7.1 |
| CVE-2026-124480 | OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKENopenemr · openemr | High8.7 |
| CVE-2026-124479 | OpenEMR before 8.4.0 Arbitrary File Read via REST Document Downloadopenemr · openemr | High7.1 |
| CVE-2026-124478 | OpenEMR before 8.3.0 Missing Authorization via addRecall in save.phpopenemr · openemr | High7.1 |
| CVE-2026-124477 | OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.phpopenemr · openemr | High8.7 |
| CVE-2026-124476 | OpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.phpopenemr · openemr | High7.1 |
| CVE-2026-124475 | OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patientopenemr · openemr | High7.1 |
| CVE-2026-124473 | OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update APIopenemr · openemr | High7.1 |
| CVE-2026-124472 | OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.phpopenemr · openemr | High8.6 |
| CVE-2026-124471 | OpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.phpopenemr · openemr | High8.6 |
| CVE-2026-124470 | OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Listsopenemr · openemr | High7.1 |
| CVE-2026-124469 | OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameteropenemr · openemr | Critical9.4 |
| CVE-2026-124468 | OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST APIopenemr · openemr | High7.1 |
| CVE-2026-124467 | OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax uploadopenemr · openemr | High8.7 |
| CVE-2026-124466 | OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uriopenemr · openemr | Medium6.9 |
| CVE-2026-124464 | OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponseopenemr · openemr | High7.1 |
| CVE-2026-124463 | OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print Viewopenemr · openemr | Critical9.3 |
| CVE-2026-124462 | OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid Parameteropenemr · openemr | High7.1 |
| CVE-2026-124461 | OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpointopenemr · openemr | High8.6 |
| CVE-2026-124460 | OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientControlleropenemr · openemr | High7.1 |
| CVE-2026-124459 | OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save Handlersopenemr · openemr | High8.6 |
| CVE-2026-124458 | OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person Endpointopenemr · openemr | High7.1 |
| CVE-2026-124457 | OpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eranameopenemr · openemr | High7.2 |
| CVE-2026-124456 | OpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations Moduleopenemr · openemr | High7.1 |
| CVE-2026-124455 | OpenEMR before 8.3.0 IDOR via Portal OnsiteDocument Pid_Equals Mass-Assignmentopenemr · openemr | High7.1 |
| CVE-2026-124453 | OpenEMR before 8.3.0 IDOR in Portal Patient Settings via persist.phpopenemr · openemr | High7.1 |
| CVE-2026-124452 | OpenEMR before 8.3.0 Stored XSS via Eye Exam Document Notesopenemr · openemr | Medium5.1 |
| CVE-2026-124451 | OpenEMR before 8.4.0 Authorization Bypass via checkUserHasAccessToPatient in SMART on FHIRopenemr · openemr | Medium6.0 |
| CVE-2026-124450 | OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocumentopenemr · openemr | Critical9.3 |
| CVE-2026-124449 | OpenEMR before 8.4.0 Missing Authorization via FHIR Media and QuestionnaireResponse Routesopenemr · openemr | High7.1 |
| CVE-2026-124448 | OpenEMR before 8.3.0 Stored XSS via CCDA/CCD Preview XSLT Attributesopenemr · openemr | High8.6 |