Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,168All CVEsplus 19,158 rejected
- 545Last 24 hours4,789 in the last 7 days
- 18,780Last 30 days1,600 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 2 | 0 | 0 | 5 | 30 |
| 2025 | 0 | 1 | 1 | 0 | 0 | 2 | 25 |
| 2024 | 1 | 2 | 1 | 0 | 0 | 4 | 23 |
| 2023 | 0 | 1 | 3 | 0 | 0 | 4 | 19 |
| 2022 | 0 | 1 | 2 | 0 | 0 | 3 | 15 |
| 2021 | 0 | 2 | 0 | 0 | 0 | 2 | 12 |
| 2020 | 0 | 0 | 1 | 0 | 0 | 1 | 10 |
| 2019 | 5 | 0 | 4 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-12974 | Security Policy Bypass in Forcepoint Security Engine (NGFW)Forcepoint · Forcepoint Security Engine (NGFW) | High7.9 |
| CVE-2026-11970 | This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before…Forcepoint · F1E mac | Medium4.8 |
| CVE-2025-12694 | Local Privilege Escalation in VPN ClientForcepoint · VPN Client | High8.5 |
| CVE-2025-2274 | Stored Cross Site Scripting in Forcepoint Web SecurityForcepoint · Web Security (On-Prem) | Medium4.8 |
| CVE-2025-12690 | Local Privilege Escalation in NGFW EngineForcepoint · NGFW Engine | High7.3 |
| CVE-2025-2272 | Privilege Escalation and Arbitrary code execution in F1E EndpointForcepoint · FIE Endpoint | High7.3 |
| CVE-2024-9103 | Persistent XSS in blocked messagesForcepoint · Email Security | Medium6.1 |
| CVE-2024-2166 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules)…Forcepoint · Email Security | High8.8 |
| CVE-2023-6452 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows…Forcepoint · Web Security | Critical9.6 |
| CVE-2023-5451 | Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA…Forcepoint · Next Generation Firewall Security Management Center | Medium6.1 |
| CVE-2023-1705 | Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) allows Privilege Escalation, Functionality…Forcepoint · F|One SmartEdge Agent | High8.4 |
| CVE-2023-2080 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…Forcepoint · Cloud Security Gateway (CSG) | High8.5 |
| CVE-2023-26292 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…Forcepoint · Cloud Security Gateway (CSG) | Medium6.1 |
| CVE-2023-26291 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…Forcepoint · Cloud Security Gateway (CSG) | Medium6.1 |
| CVE-2023-26290 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…Forcepoint · Cloud Security Gateway (CSG) | Medium6.1 |
| CVE-2022-1700 | Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also…Forcepoint · Data Loss Prevention (DLP) | High7.5 |
| CVE-2022-27609 | Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with…Forcepoint · One Endpoint | Medium6.0 |
| CVE-2022-27608 | Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges.…Forcepoint · One Endpoint | Medium6.0 |
| CVE-2021-41530 | Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User…Forcepoint Next Generation Firewall | High7.5 |
| CVE-2020-6590 | Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.Forcepoint Web Security Content Gateway | High7.5 |
| CVE-2019-6146 | It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 (Medium)…Public exploitForcepoint Web Security | Medium6.1 |
| CVE-2019-6147 | Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal…Forcepoint · NGFW Security Management Center | Medium5.9 |
| CVE-2019-6142 | It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3. It is strongly recommended that you apply the relevant hotfix…Forcepoint · Forcepoint Email Security | Medium6.1 |
| CVE-2019-6144 | This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection.Forcepoint One Endpoint | Medium6.5 |
| CVE-2019-6145 | Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user.…Forcepoint · Forcepoint VPN Client for Windows | Medium6.7 |
| CVE-2019-6143 | Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability…Forcepoint · Forcepoint Next Generation Firewall | Critical9.1 |
| CVE-2019-6140 | A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hybrid registration…Forcepoint · Forcepoint Email Security | Critical9.8 |
| CVE-2018-16530 | A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a…Forcepoint · Forcepoint Email Security | Critical9.8 |
| CVE-2018-16529 | A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period…Forcepoint · Forcepoint Email Security | Critical9.8 |
| CVE-2019-6139 | Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this…Forcepoint . · Forcepoint User ID (FUID) server | Critical9.8 |