Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,037All CVEsplus 19,157 rejected
- 1,975Last 24 hours4,762 in the last 7 days
- 18,784Last 30 days1,612 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 17 | 136 | 137 | 9 | 0 | 299 | 3,284 |
| 2025 | 24 | 107 | 125 | 14 | 0 | 270 | 2,985 |
| 2024 | 23 | 98 | 148 | 12 | 0 | 281 | 2,715 |
| 2023 | 29 | 158 | 133 | 4 | 0 | 324 | 2,434 |
| 2022 | 20 | 86 | 107 | 4 | 0 | 217 | 2,110 |
| 2021 | 18 | 62 | 159 | 3 | 0 | 242 | 1,893 |
| 2020 | 32 | 70 | 66 | 0 | 0 | 168 | 1,651 |
| 2019 | 19 | 94 | 82 | 0 | 0 | 195 | 1,483 |
| 2018 | 15 | 79 | 75 | 3 | 0 | 172 | 1,288 |
| 2017 | 35 | 189 | 178 | 6 | 0 | 408 | 1,116 |
| 2016 | 5 | 36 | 67 | 4 | 0 | 112 | 708 |
| 2015 | 1 | 27 | 122 | 4 | 0 | 154 | 596 |
| 2014 | 1 | 22 | 97 | 12 | 0 | 132 | 442 |
| 2013 | 0 | 17 | 91 | 12 | 0 | 120 | 310 |
| 2012 | 0 | 9 | 77 | 7 | 0 | 93 | 190 |
| 2011 | 0 | 20 | 54 | 2 | 0 | 76 | 97 |
| 2010 | 0 | 6 | 15 | 0 | 0 | 21 | 21 |
| Title | ||
|---|---|---|
| CVE-2026-116081 | Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. are vulnerable to improper certificate…Fenrir Inc. · Sleipnir Mobile for iPhone / iPad | Low2.3 |
| CVE-2026-117477 | KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the…GMO Prime Strategy Co., Ltd. · KUSANAGI 7 Security Edition | Medium5.1 |
| CVE-2026-113437 | Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd. and the ODM product rocoeyes provided by Rococo Co. Ltd. Arbitrary files may be…DOS Co., Ltd. · SS1 | Medium6.9 |
| CVE-2026-109582 | Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information used by the product may be obtained.DOS Co., Ltd. · SS1 | Medium5.1 |
| CVE-2026-120386 | Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the affected runtime, the host process may be forced to crash.Effekseer · Effekseer | Medium5.1 |
| CVE-2026-118869 | An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the…SHIRASAGI Project · SHIRASAGI | High8.7 |
| CVE-2026-117679 | A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when…SHIRASAGI Project · SHIRASAGI | Medium5.1 |
| CVE-2026-109849 | Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is exploited, an attacker who can access the password change API with specific…NTT DATA INTELLILINK Corporation · Hinemos | High7.1 |
| CVE-2026-105296 | Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may…Akeeba Ltd. · Akeeba Backup for Joomla! | Medium5.1 |
| CVE-2026-109836 | The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or…ALCPU · Core Temp | High8.4 |
| CVE-2026-109822 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files…Yamaha Corporation · NWR100 | High7.1 |
| CVE-2026-97854 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by…Yamaha Corporation · NWR100 | Critical9.3 |
| CVE-2026-103665 | The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is…Yamaha Corporation · Yamaha LAN Monitor for Windows | High8.4 |
| CVE-2026-97860 | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system…Yamaha Corporation · YMS-VPN8 | High8.4 |
| CVE-2026-115624 | GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vulnerability, a user with read-only…GROWI, Inc. · GROWI | Medium6.9 |
| CVE-2026-109848 | GROWI contains an authorization bypass vulnerability in its tag update API and the page update API due to improper use of a user-controlled key. By exploiting…GROWI, Inc. · GROWI | Low2.3 |
| CVE-2026-105272 | GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By…GROWI, Inc. · GROWI | Low2.3 |
| CVE-2026-113438 | Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If…Implem Inc. · Pleasanter | Medium6.9 |
| CVE-2026-107900 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to…FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT | High8.4 |
| CVE-2026-107899 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a…FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT | High8.4 |
| CVE-2026-107898 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. Opening a crafted…FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT | High8.4 |
| CVE-2026-107897 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead…FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT | High8.4 |
| CVE-2026-107896 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load_gr_item. Opening a crafted V7 file may lead to…FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT | High8.4 |
| CVE-2026-107895 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or…FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT | High8.4 |
| CVE-2026-107894 | V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or…FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT | High8.4 |
| CVE-2026-113345 | Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access…Ministry of Land, Infrastructure, Transport and Tourism, Japan · Electronic delivery item Inspection Support System | High8.5 |
| CVE-2026-97627 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with…Atsumi Electric Co., Ltd. · ADX5004 | High8.6 |
| CVE-2026-100737 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with…Atsumi Electric Co., Ltd. · ADX5004 | Medium6.9 |
| CVE-2026-109831 | UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS)…GNU Project · UnRTF | Medium5.1 |
| CVE-2026-104679 | VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product…Yamaha Corporation · VOCALOID6 Editor | Medium6.9 |
| CVE-2026-72528 | "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up…CREEMA LTD. · "Handmade Marketplace App - Creema" for Android | Medium5.1 |
| CVE-2026-75559 | The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted…Ministry of Land, Infrastructure, Transport and Tourism · Vehicle Inspection Certificate Viewer (for Android) | Medium6.9 |
| CVE-2026-96614 | "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the…GEO CORPORATION · "ゲオアプリ" for Android | Medium5.1 |
| CVE-2026-105271 | "ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a…GEO CORPORATION · "ゲオアプリ" for Android | Medium5.1 |
| CVE-2026-103671 | External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be…EC-CUBE CO.,LTD. · AmazonPay V2 Plugin (4.0/4.1 series) | Medium5.3 |
| CVE-2026-107153 | Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the…Rakuten Mobile, Inc. · Rakuten Mini | High7.0 |
| CVE-2026-106931 | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM…ExploitedPublic exploitEG Secure Solutions Inc. · SiteGuard Server Edition for Apache httpd | High8.5 |
| CVE-2026-101020 | An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited,…Hammock Corporation · AssetView | High8.5 |
| CVE-2026-92862 | The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website…Wavedash Co., Ltd. · Ticket Ryutsu Center | Medium4.6 |
| CVE-2026-92861 | The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.Wavedash Co., Ltd. · Ticket Ryutsu Center | Medium5.1 |
| CVE-2026-103668 | An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL…Six Apart Ltd. · Movable Type Cloud Edition | High8.8 |
| CVE-2026-96408 | A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or…Six Apart Ltd. · Movable Type Cloud Edition | Critical9.3 |
| CVE-2026-100727 | An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected…GROWI, Inc. · GROWI | Medium6.9 |
| CVE-2026-92873 | Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog…Pgpool Global Development Group · Pgpool-II | Medium6.9 |
| CVE-2026-92872 | Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.Pgpool Global Development Group · Pgpool-II | Medium5.3 |
| CVE-2026-92871 | A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.Pgpool Global Development Group · Pgpool-II | High8.7 |
| CVE-2026-93462 | A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may obtain sensitive…baserCMS User Community · baserCMS | Medium6.9 |
| CVE-2026-93464 | A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be…baserCMS User Community · baserCMS | Medium5.1 |
| CVE-2026-93460 | A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary…baserCMS User Community · baserCMS | Medium5.1 |
| CVE-2026-93463 | A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed…baserCMS User Community · baserCMS | Medium5.1 |