Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,620All CVEsplus 19,169 rejected
- 563Last 24 hours4,903 in the last 7 days
- 18,566Last 30 days1,585 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 6 | 0 | 0 | 0 | 0 | 6 | 45 |
| 2025 | 2 | 16 | 9 | 0 | 0 | 27 | 39 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 12 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 12 |
| 2022 | 1 | 1 | 0 | 0 | 0 | 2 | 12 |
| 2021 | 3 | 1 | 1 | 0 | 0 | 5 | 10 |
| 2020 | 1 | 2 | 0 | 0 | 0 | 3 | 5 |
| 2019 | 1 | 1 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-2298 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement allows Web Services…Salesforce · Marketing Cloud Engagement | Critical9.4 |
| CVE-2026-22583 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (CloudPagesUrl…Salesforce · Marketing Cloud Engagement | Critical9.8 |
| CVE-2026-22582 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing Cloud Engagement (MicrositeUrl module)…Salesforce · Marketing Cloud Engagement | Critical9.8 |
| CVE-2026-22586 | Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center,…Salesforce · Marketing Cloud Engagement | Critical9.8 |
| CVE-2026-22585 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center,…Salesforce · Marketing Cloud Engagement | Critical9.8 |
| CVE-2026-22584 | Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in…Salesforce · Uni2TS | Critical9.8 |
| CVE-2025-64322 | Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration…Salesforce · Agentforce Vibes Extension | Medium5.3 |
| CVE-2025-64321 | Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration…Salesforce · Agentforce Vibes Extension | Medium5.3 |
| CVE-2025-64320 | Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects…Salesforce · Agentforce Vibes Extension | Medium6.5 |
| CVE-2025-64319 | Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration…Salesforce · Mulesoft Anypoint Code Builder | Medium5.3 |
| CVE-2025-64318 | Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration…Salesforce · Mulesoft Anypoint Code Builder | Medium5.3 |
| CVE-2025-10875 | Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects…Salesforce · Mulesoft Anypoint Code Builder | Medium6.5 |
| CVE-2025-9844 | Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI:…Salesforce · Salesforce CLI | High8.8 |
| CVE-2025-52451 | Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows…Salesforce · Tableau Server | High8.5 |
| CVE-2025-52450 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api -…Salesforce · Tableau Server | Medium6.5 |
| CVE-2025-26498 | Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows…Salesforce · Tableau Server | High7.3 |
| CVE-2025-26497 | Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows Absolute Path…Salesforce · Tableau Server | High7.3 |
| CVE-2025-26496 | Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload…Salesforce · Tableau Server, Tableau Desktop | Critical9.3 |
| CVE-2025-52455 | Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing. This…Salesforce · Tableau Server | Medium5.3 |
| CVE-2025-52454 | Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location…Salesforce · Tableau Server | High8.2 |
| CVE-2025-52453 | Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing.…Salesforce · Tableau Server | High8.2 |
| CVE-2025-52452 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api -…Salesforce · Tableau Server | High8.5 |
| CVE-2025-52449 | Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows…Salesforce · Tableau Server | High8.5 |
| CVE-2025-52448 | Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (validate-initial-sql api modules) allows…Salesforce · Tableau Server | High8.1 |
| CVE-2025-52447 | Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (set-initial-sql tabdoc command modules) allows…Salesforce · Tableau Server | High8.1 |
| CVE-2025-52446 | Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface…Salesforce · Tableau Server | High8.0 |
| CVE-2025-43699 | Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check. This impacts…Salesforce · OmniStudio | Medium5.3 |
| CVE-2025-43698 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects.…Salesforce · OmniStudio | Critical9.1 |
| CVE-2025-43697 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. This impacts OmniStudio: before…Salesforce · OmniStudio | High7.5 |
| CVE-2025-43701 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data. This impacts OmniStudio:…Salesforce · OmniStudio | High7.5 |
| CVE-2025-43700 | Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data. This impacts OmniStudio: before…Salesforce · OmniStudio | High7.5 |
| CVE-2025-26495 | Sensitive Data Exposure in Tableau ServerSalesforce · Tableau Server | High7.5 |
| CVE-2025-26494 | Server Side Request Forgery vulnerability in Tableau ServerSalesforce · Tableau Server | High7.7 |
| CVE-2022-22128 | Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code…Tableau Server | Critical9.8 |
| CVE-2022-22127 | Tableau is aware of a broken access control vulnerability present in Tableau Server affecting Tableau Server customers using Local Identity Store for managing…Tableau Server | High7.2 |
| CVE-2021-1630 | XML external entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal…Mulesoft | High7.5 |
| CVE-2021-1629 | Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.Tableau | Medium6.1 |
| CVE-2021-1628 | MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and…Mulesoft | Critical9.8 |
| CVE-2021-1627 | MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and…Mulesoft | Critical9.8 |
| CVE-2021-1626 | MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise…Mulesoft | Critical9.8 |
| CVE-2020-6939 | Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a…Tableau Server | Critical9.8 |
| CVE-2020-6938 | A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive…Tableau | High7.5 |
| CVE-2020-6937 | A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which…MuleSoft Mule CE/EE | High7.5 |
| CVE-2019-15631 | Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute…MuleSoft · Mule CE/EE 3.x | Critical9.8 |
| CVE-2019-15630 | Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft…Salesforce, Inc. · Mulesoft | High7.5 |