Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,785All CVEsplus 19,170 rejected
- 406Last 24 hours4,896 in the last 7 days
- 16,934Last 30 days1,492 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 1,582 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 1,582 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 1,582 |
| 2023 | 46 | 203 | 284 | 30 | 0 | 563 | 1,582 |
| 2022 | 107 | 379 | 336 | 28 | 0 | 850 | 1,019 |
| 2021 | 7 | 69 | 88 | 5 | 0 | 169 | 169 |
| Title | ||
|---|---|---|
| CVE-2023-5948 | Improper Authorization in teamamaze/amazefileutilitiesPublic exploitteamamaze · teamamaze/amazefileutilities | High8.2 |
| CVE-2023-5904 | Cross-site Scripting (XSS) - Stored in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Low2.7 |
| CVE-2023-5903 | Cross-site Scripting (XSS) - Stored in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Low2.7 |
| CVE-2023-5900 | Cross-Site Request Forgery in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Low3.5 |
| CVE-2023-5901 | Cross-site Scripting in pkp/pkp-libpkp · pkp/pkp-lib | Low3.5 |
| CVE-2023-5897 | Cross-Site Request Forgery (CSRF) in pkp/customLocalePublic exploitpkp · pkp/customLocale | Medium6.3 |
| CVE-2023-5898 | Cross-Site Request Forgery (CSRF) in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Low3.5 |
| CVE-2023-5902 | Cross-Site Request Forgery (CSRF) in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Medium4.3 |
| CVE-2023-5896 | Cross-site Scripting (XSS) - Stored in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Low2.7 |
| CVE-2023-5899 | Cross-Site Request Forgery (CSRF) in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Low3.5 |
| CVE-2023-5895 | Cross-site Scripting (XSS) - DOM in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Low3.5 |
| CVE-2023-5894 | Cross-site Scripting (XSS) - Stored in pkp/ojsPublic exploitpkp · pkp/ojs | Low3.5 |
| CVE-2023-5889 | Insufficient Session Expiration in pkp/pkp-libpkp · pkp/pkp-lib | Medium4.3 |
| CVE-2023-5891 | Cross-site Scripting (XSS) - Reflected in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Medium5.4 |
| CVE-2023-5892 | Cross-site Scripting (XSS) - Stored in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Medium5.4 |
| CVE-2023-5893 | Cross-Site Request Forgery (CSRF) in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Low3.5 |
| CVE-2023-5890 | Cross-site Scripting (XSS) - Stored in pkp/pkp-libPublic exploitpkp · pkp/pkp-lib | Medium4.6 |
| CVE-2023-5873 | Cross-site Scripting (XSS) - Stored in pimcore/pimcorePublic exploitpimcore · pimcore/pimcore | Medium4.0 |
| CVE-2023-5866 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqPublic exploitthorsten · thorsten/phpmyfaq | Medium6.3 |
| CVE-2023-5867 | Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqPublic exploitthorsten · thorsten/phpmyfaq | Medium4.6 |
| CVE-2023-5865 | Insufficient Session Expiration in thorsten/phpmyfaqPublic exploitthorsten · thorsten/phpmyfaq | High7.6 |
| CVE-2023-5864 | Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten · thorsten/phpmyfaq | High7.4 |
| CVE-2023-5863 | Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqPublic exploitthorsten · thorsten/phpmyfaq | High7.4 |
| CVE-2023-5861 | Cross-site Scripting (XSS) - Stored in microweber/microweberPublic exploitmicroweber · microweber/microweber | Medium6.4 |
| CVE-2023-5862 | Missing Authorization in hamza417/inurePublic exploithamza417 · hamza417/inure | Medium5.1 |
| CVE-2023-5833 | Improper Access Control in mintplex-labs/anything-llmPublic exploitmintplex-labs · mintplex-labs/anything-llm | High8.1 |
| CVE-2023-5832 | Improper Input Validation in mintplex-labs/anything-llmPublic exploitmintplex-labs · mintplex-labs/anything-llm | Critical9.1 |
| CVE-2023-5844 | Unverified Password Change in pimcore/admin-ui-classic-bundlePublic exploitpimcore · pimcore/admin-ui-classic-bundle | Medium4.3 |
| CVE-2023-5842 | Cross-site Scripting (XSS) - Stored in dolibarr/dolibarrPublic exploitdolibarr · dolibarr/dolibarr | Medium4.8 |
| CVE-2023-5838 | Insufficient Session Expiration in linkstackorg/linkstackPublic exploitlinkstackorg · linkstackorg/linkstack | Medium4.1 |
| CVE-2023-5840 | Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstackPublic exploitlinkstackorg · linkstackorg/linkstack | Medium6.5 |
| CVE-2023-5839 | Privilege Chaining in hestiacp/hestiacpPublic exploithestiacp · hestiacp/hestiacp | High8.8 |
| CVE-2023-5690 | Cross-Site Request Forgery (CSRF) in modoboa/modoboaPublic exploitmodoboa · modoboa/modoboa | Medium5.3 |
| CVE-2023-5689 | Cross-site Scripting (XSS) - DOM in modoboa/modoboaPublic exploitmodoboa · modoboa/modoboa | High7.1 |
| CVE-2023-5688 | Cross-site Scripting (XSS) - DOM in modoboa/modoboaPublic exploitmodoboa · modoboa/modoboa | Critical9.8 |
| CVE-2023-5687 | Cross-Site Request Forgery (CSRF) in mosparo/mosparoPublic exploitmosparo · mosparo/mosparo | Medium5.4 |
| CVE-2023-5686 | Heap-based Buffer Overflow in radareorg/radare2radareorg · radareorg/radare2 | Medium5.1 |
| CVE-2023-5626 | Cross-Site Request Forgery (CSRF) in pkp/ojsPublic exploitpkp · pkp/ojs | Low3.5 |
| CVE-2023-5595 | Denial of Service in gpac/gpacPublic exploitgpac · gpac/gpac | Medium5.1 |
| CVE-2023-5591 | SQL Injection in librenms/librenmsPublic exploitlibrenms · librenms/librenms | High7.8 |
| CVE-2023-5590 | NULL Pointer Dereference in seleniumhq/seleniumPublic exploitseleniumhq · seleniumhq/selenium | High7.5 |
| CVE-2023-5586 | NULL Pointer Dereference in gpac/gpacPublic exploitgpac · gpac/gpac | Medium4.4 |
| CVE-2023-4517 | Cross-site Scripting (XSS) - Stored in hestiacp/hestiacpPublic exploithestiacp · hestiacp/hestiacp | Low3.2 |
| CVE-2023-4829 | Cross-site Scripting (XSS) - Stored in froxlor/froxlorPublic exploitfroxlor · froxlor/froxlor | Medium4.3 |
| CVE-2023-5573 | Allocation of Resources Without Limits or Throttling in vriteio/vritePublic exploitvriteio · vriteio/vrite | Medium4.7 |
| CVE-2023-5572 | Server-Side Request Forgery (SSRF) in vriteio/vritePublic exploitvriteio · vriteio/vrite | Critical10.0 |
| CVE-2023-5571 | Improper Input Validation in vriteio/vritePublic exploitvriteio · vriteio/vrite | Medium6.5 |
| CVE-2023-5564 | Cross-site Scripting (XSS) - Stored in froxlor/froxlorPublic exploitfroxlor · froxlor/froxlor | Medium5.2 |
| CVE-2023-5556 | Cross-site Scripting (XSS) - Reflected in structurizr/onpremisesPublic exploitstructurizr · structurizr/onpremises | Medium5.3 |
| CVE-2023-5555 | Cross-site Scripting (XSS) - Generic in frappe/lmsPublic exploitfrappe · frappe/lms | High7.1 |