Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 404,826All CVEsplus 19,157 rejected
- 2,073Last 24 hours4,688 in the last 7 days
- 18,896Last 30 days1,622 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 1 | 0 | 0 | 1 | 35 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 34 |
| 2024 | 1 | 1 | 2 | 0 | 0 | 4 | 34 |
| 2023 | 7 | 21 | 2 | 0 | 0 | 30 | 30 |
| Title | ||
|---|---|---|
| CVE-2026-9539 | libslirp TCP URG OOB Read Information LeakPublic exploitfreedesktop.org · libslirp | Medium6.5 |
| CVE-2024-7009 | Calibre SQL InjectionPublic exploitCalibre · Calibre | Medium4.2 |
| CVE-2024-7008 | Calibre Reflected Cross-Site Scripting (XSS)Public exploitCalibre · Calibre | Medium5.4 |
| CVE-2024-6782 | Calibre Remote Code ExecutionPublic exploitCalibre · Calibre | Critical9.8 |
| CVE-2024-6781 | Calibre Arbitrary File ReadPublic exploitCalibre · Calibre | High7.5 |
| CVE-2023-4225 | Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo · Chamilo | High8.8 |
| CVE-2023-4226 | Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo · Chamilo | High8.8 |
| CVE-2023-4224 | Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo · Chamilo | High8.8 |
| CVE-2023-4223 | Chamilo LMS File Upload Functionality Remote Code ExecutionPublic exploitChamilo · Chamilo | High8.8 |
| CVE-2023-4222 | Chamilo LMS Learning Path PPT2LP Command Injection VulnerabilityChamilo · Chamilo | High7.2 |
| CVE-2023-4221 | Chamilo LMS Learning Path PPT2LP Command Injection VulnerabilityChamilo · Chamilo | High7.2 |
| CVE-2023-4220 | Chamilo LMS Unauthenticated Big Upload File Remote Code ExecutionPublic exploitChamilo · Chamilo | High8.1 |
| CVE-2023-3545 | Chamilo LMS Htaccess File Upload Security BypassChamilo · Chamilo | Critical9.8 |
| CVE-2023-3533 | Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File WriteChamilo · Chamilo | Critical9.8 |
| CVE-2023-3368 | Chamilo LMS Unauthenticated Command InjectionPublic exploitChamilo · Chamilo | Critical9.8 |
| CVE-2023-1720 | Bitrix24 Stored Cross-Site Scripting (XSS) via File UploadPublic exploitBitrix24 · Bitrix24 | Critical9.6 |
| CVE-2023-1719 | Bitrix24 Insecure Global Variable ExtractionPublic exploitBitrix24 · Bitrix24 | High7.5 |
| CVE-2023-1718 | Bitrix24 Denial-of-Service (DoS) via Improper File Stream AccessPublic exploitBitrix24 · Bitrix24 | High7.5 |
| CVE-2023-1717 | Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype PollutionPublic exploitBitrix24 · Bitrix24 | Critical9.6 |
| CVE-2023-1716 | Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)Bitrix24 · Bitrix24 | Critical9.0 |
| CVE-2023-1715 | Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)Bitrix24 · Bitrix24 | Critical9.0 |
| CVE-2023-1714 | Bitrix24 Remote Command Execution (RCE) via Unsafe Variable ExtractionPublic exploitBitrix24 · Bitrix24 | High8.8 |
| CVE-2023-1713 | Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File CreationPublic exploitBitrix24 · Bitrix24 | High8.8 |
| CVE-2023-4198 | Dolibarr ERP CRM (<= 17.0.3) Improper Access ControlPublic exploitDolibarr · Dolibarr ERP CRM | Medium6.5 |
| CVE-2023-4197 | Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCEPublic exploitDolibarr · Dolibarr ERP CRM | High7.5 |
| CVE-2023-30591 | NodeBB Pre-Authentication Denial-of-ServicePublic exploitNodeBB, Inc. · NodeBB | High7.5 |
| CVE-2023-2315 | Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2Public exploitOpencart · Opencart | High8.1 |
| CVE-2023-2971 | Typora Local File DisclosurePublic exploitTypora · Typora | Medium6.3 |
| CVE-2023-2318 | MarkText DOM-Based Cross-site Scripting leading to Remote Code ExecutionPublic exploitMarkText · MarkText | High8.6 |
| CVE-2023-2317 | Typora DOM-Based Cross-site Scripting leading to Remote Code ExecutionPublic exploitTypora · Typora | High8.6 |
| CVE-2023-2316 | Typora Local File DisclosurePublic exploitTypora · Typora | High7.4 |
| CVE-2023-2110 | Obsidian Local File DisclosurePublic exploitObsidian · Obsidian | High8.2 |
| CVE-2023-3514 | RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege VulnerabilityPublic exploitRazer · Razer Central | High7.8 |
| CVE-2023-3513 | RazerCentralService Unsafe Deserialization Escalation of PrivilegePublic exploitRazer · Razer Central | High7.8 |
| CVE-2023-2017 | Improper Control of Generation of Code in Twig Rendered Views in ShopwarePublic exploitShopware AG · Shopware 6 | High8.8 |