Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 404,439All CVEsplus 19,156 rejected
- 1,924Last 24 hours4,788 in the last 7 days
- 18,600Last 30 days1,581 of them critical
- 1,773Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 157 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 157 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 157 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 157 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 157 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 157 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 157 |
| 2019 | 44 | 42 | 68 | 3 | 0 | 157 | 157 |
| Title | ||
|---|---|---|
| CVE-2017-1002201 | In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > " ' must be escaped properly. In this…http://haml.info/ · haml | Medium6.1 |
| CVE-2019-1020002 | Pterodactyl before 0.7.14 with 2FA allows credential sniffing.Pterodactyl · Pterodactyl Panel | High7.5 |
| CVE-2019-1020004 | Tridactyl before 1.16.0 allows fake key events.Tridactyl · Tridactyl | High7.5 |
| CVE-2019-1020007 | Dependency-Track before 3.5.1 allows XSS.Dependency-Track · Dependency-Track | Medium5.4 |
| CVE-2019-1020009 | Fleet before 2.1.2 allows exposure of SMTP credentials.Fleet · Fleet | High7.5 |
| CVE-2019-1020008 | stacktable.js before 1.0.4 allows XSS.stacktable.js · stacktable.js | Medium6.1 |
| CVE-2019-1020006 | invenio-app before 1.1.1 allows host header injection.Invenio · invenio-app | Medium6.1 |
| CVE-2019-1020005 | invenio-communities before 1.0.0a20 allows XSS.Invenio · invenio-communities | Medium5.4 |
| CVE-2019-1020003 | invenio-records before 1.2.2 allows XSS.Invenio · invenio-records | Medium5.4 |
| CVE-2019-1020019 | invenio-previewer before 1.0.0a12 allows XSS.Invenio · invenio-previewer | Medium6.1 |
| CVE-2019-1020018 | Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link.Discourse | High7.3 |
| CVE-2019-1020017 | Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP.Discourse | Medium5.3 |
| CVE-2019-1020016 | ASH-AIO before 2.0.0.3 allows an open redirect.ASH-AIO · ASH-AIO | Medium6.1 |
| CVE-2019-1020015 | graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.graphql-engine · graphql-engine | High7.5 |
| CVE-2019-1020014 | docker-credential-helpers before 0.6.3 has a double free in the List functions.Docker · docker-credential-helpers | Medium5.5 |
| CVE-2019-1020013 | parse-server before 3.6.0 allows account enumeration.Parse · parse-server | Medium5.3 |
| CVE-2019-1020012 | parse-server before 3.4.1 allows DoS after any POST to a volatile class.Parse · parse-server | High7.5 |
| CVE-2019-1020011 | SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority.SmokeDetector · SmokeDetector | Critical9.0 |
| CVE-2019-1020010 | Misskey before 10.102.4 allows hijacking a user's token.Misskey · Misskey | Medium6.1 |
| CVE-2019-1020001 | yard before 0.9.20 allows path traversal.yard · yard | High7.5 |
| CVE-2019-1010147 | Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation. The impact is: Victim attacked and access…Yellowfin · Smart Reporting | Medium5.4 |
| CVE-2019-1010127 | VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or…VCFTools · vcftools | High7.8 |
| CVE-2019-1010161 | perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass authentication. The component is: JWT.pm for JWT security…perl-CRYPT-JWT · perl-CRYPT-JWT | Critical9.8 |
| CVE-2019-1010172 | Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString…Jsish · Jsish | High7.5 |
| CVE-2019-1010174 | CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: load_network() function. The attack vector…CImg · The CImg Library | Critical9.8 |
| CVE-2019-1010176 | JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code…JerryScript · JerryScript | Critical9.8 |
| CVE-2019-1010182 | yaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of service by impossible to catch abort. The component is:…yaml-rust · yaml-rust | Medium6.5 |
| CVE-2019-1010183 | serde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of service by aborting. The component is: from_* functions (all…serde · serde_yaml | Medium6.5 |
| CVE-2019-1010178 | Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote Code Execution. The component is:…Fred · MODX Revolution | Critical9.8 |
| CVE-2019-1010179 | PHKP including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b is affected by: Improper Neutralization of Special Elements used in a Command ('Command…PHKP · PHKP | Critical9.8 |
| CVE-2019-1010189 | mgetty prior to version 1.2.1 is affected by: Infinite Loop. The impact is: DoS, the program does never terminates. The component is: g3/g32pbm.c. The attack…mgetty · mgetty | Medium5.5 |
| CVE-2019-1010191 | marginalia < 1.6 is affected by: SQL Injection. The impact is: The impact is a injection of any SQL queries when a user controller argument is added as a…marginalia · marginalia | Critical9.8 |
| CVE-2019-1010193 | hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS).hisiphp · hisiphp | Medium6.1 |
| CVE-2019-1010190 | mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is:…mgetty · mgetty | Medium5.5 |
| CVE-2019-1010180 | GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code…GNU · gdb | High7.8 |
| CVE-2019-1010177 | Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function…Jsish · Jsi | Critical9.8 |
| CVE-2019-1010163 | Socusoft Co Photo 2 Video Converter 8.0.0 is affected by: Buffer Overflow - Local shell-code execution and Denial of Service. The impact is: Local privilege…Public exploitSocusoft Co · Photo 2 Video Converter | High7.8 |
| CVE-2019-1010199 | ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). The impact is: JavaScrpit is reflected in the server response, hence…ServiceStack · ServiceStack Framework | Medium6.1 |
| CVE-2019-1010200 | Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 is affected by: CWE-78: Improper…Voice Builder · Voice Builder | Critical9.8 |
| CVE-2019-1010201 | Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updateProcInsIdByBusinessId() function in…Jeesite · Jeesite | Medium6.5 |
| CVE-2019-1010173 | Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function Jsi_ValueArrayIndex (jsiValue.c:366). The…Jsish · Jsi | High7.5 |
| CVE-2019-1010202 | Jeesite 1.2.7 is affected by: XML External Entity (XXE). The impact is: sensitive information disclosure. The component is: convertToModel() function in…Jeesite · Jeesite | Medium6.5 |
| CVE-2019-1010171 | Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.c:567).…Jsish · Jsi | High7.5 |
| CVE-2019-1010170 | Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_ObjFree (jsiObj.c:230). The attack vector…Jsish · Jsi | High7.5 |
| CVE-2019-1010169 | Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexer_getchar (jsiLexer.c:9). The attack…Jsish · Jsi | High7.5 |
| CVE-2019-1010204 | GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The…GNU binutils · gold | Medium5.5 |
| CVE-2019-1010205 | LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal. The impact is: The vulnerability allows an…LINAGORA · hublin | High7.5 |
| CVE-2019-1010206 | OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this…OSS · Http Request (Apache Cordova Plugin) | Medium5.9 |
| CVE-2019-1010162 | jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict…jsi · jsi | Medium5.5 |
| CVE-2019-1010155 | D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third…D-Link · DSL-2750U | Critical9.1 |