Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,666All CVEsplus 19,172 rejected
- 85Last 24 hours4,577 in the last 7 days
- 16,065Last 30 days1,411 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 36 | 21 | 51 | 0 | 0 | 108 | 2,461 |
| 2025 | 99 | 85 | 16 | 0 | 0 | 200 | 2,353 |
| 2024 | 30 | 200 | 27 | 2 | 0 | 259 | 2,153 |
| 2023 | 48 | 266 | 30 | 3 | 0 | 347 | 1,894 |
| 2022 | 170 | 178 | 57 | 3 | 0 | 408 | 1,547 |
| 2021 | 76 | 153 | 43 | 0 | 0 | 272 | 1,139 |
| 2020 | 46 | 101 | 49 | 2 | 0 | 198 | 867 |
| 2019 | 46 | 111 | 30 | 0 | 0 | 187 | 669 |
| 2018 | 67 | 227 | 36 | 5 | 0 | 335 | 482 |
| 2017 | 30 | 90 | 12 | 1 | 0 | 133 | 147 |
| 2016 | 0 | 13 | 1 | 0 | 0 | 14 | 14 |
| Title | ||
|---|---|---|
| CVE-2026-11315 | A out-of-bounds read vulnerability exists in the dr_mp3 drmp3_init_internal functionality of dr_libs (version(s): 0.7.3). A specially crafted .mp3 file can…mackron · dr_libs | Medium4.3 |
| CVE-2026-11316 | A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5). A specially crafted…mackron · dr_libs | High8.8 |
| CVE-2026-41216 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to…vtk · vtk | High7.5 |
| CVE-2026-42057 | An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead…vtk · vtk | High7.5 |
| CVE-2026-8822 | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a…vtk · vtk | High7.5 |
| CVE-2026-8824 | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file…vtk · vtk | High7.5 |
| CVE-2026-9535 | A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an…vtk · vtk | High8.2 |
| CVE-2026-9536 | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted…vtk · vtk | High7.5 |
| CVE-2026-42949 | A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to…frangoteam · Frangoteam | Medium5.6 |
| CVE-2026-40063 | A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can…frangoteam · Frangoteam | Medium5.3 |
| CVE-2026-42922 | A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a…frangoteam · Frangoteam | Critical9.8 |
| CVE-2026-35499 | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A…totolink · Totolink | Critical9.1 |
| CVE-2026-40627 | An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A…totolink · Totolink | Critical9.1 |
| CVE-2026-28763 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s):…totolink · Totolink | Critical9.1 |
| CVE-2026-41223 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s):…totolink · Totolink | Critical9.1 |
| CVE-2026-33568 | A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).…totolink · Totolink | Critical9.1 |
| CVE-2026-41222 | A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s):…totolink · Totolink | Critical9.1 |
| CVE-2026-40615 | A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s):…totolink · Totolink | Critical9.1 |
| CVE-2026-42020 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R…totolink · Totolink | Critical9.1 |
| CVE-2026-42019 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R…totolink · Totolink | Critical9.1 |
| CVE-2026-42024 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…totolink · Totolink | Critical9.1 |
| CVE-2026-42023 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…totolink · Totolink | Critical9.1 |
| CVE-2026-42022 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…totolink · Totolink | Critical9.1 |
| CVE-2026-42021 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R…totolink · Totolink | Critical9.1 |
| CVE-2026-42026 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…totolink · Totolink | Critical9.1 |
| CVE-2026-42025 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s):…totolink · Totolink | Critical9.1 |
| CVE-2026-9660 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s):…totolink · Totolink | Critical9.1 |
| CVE-2026-9659 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s):…totolink · Totolink | Critical9.1 |
| CVE-2026-9814 | An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…totolink · Totolink | Critical9.1 |
| CVE-2026-9817 | A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…totolink · Totolink | Critical9.1 |
| CVE-2026-9827 | A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…totolink · Totolink | Critical9.1 |
| CVE-2026-9869 | A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…totolink · Totolink | Critical9.1 |
| CVE-2026-10131 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…totolink · Totolink | Critical9.1 |
| CVE-2026-10132 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…totolink · Totolink | Critical9.1 |
| CVE-2026-10133 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…totolink · Totolink | Critical9.1 |
| CVE-2026-10135 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted…totolink · Totolink | Critical9.1 |
| CVE-2026-10136 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…totolink · Totolink | Critical9.1 |
| CVE-2026-10137 | A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A…totolink · Totolink | Critical9.1 |
| CVE-2026-10138 | A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…totolink · Totolink | Critical9.1 |
| CVE-2026-10139 | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…totolink · Totolink | Critical9.1 |
| CVE-2026-10141 | A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially…totolink · Totolink | Critical9.1 |
| CVE-2026-41958 | A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially…visidata · visidata | Medium6.5 |
| CVE-2026-42532 | A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .eml…visidata · visidata | Medium5.5 |
| CVE-2026-22879 | A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2). A specially…vtk · vtk | High8.1 |
| CVE-2026-25104 | A heap-based buffer overflow vulnerability exists in the LXF parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file can lead…MediaArea · MediaInfoLib | High7.8 |
| CVE-2026-25713 | A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted media file that…MediaArea · MediaInfoLib | High7.8 |
| CVE-2026-28764 | A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafted .lxf file…MediaArea · MediaInfoLib | High7.8 |
| CVE-2026-22554 | A heap-based buffer overflow vulnerability exists in the Channel Splitting functionality of MediaInfoLib (version(s): 26.01). A specially crafted .riff file…MediaArea · MediaInfoLib | High7.8 |
| CVE-2025-58074 | Privilege escalation during the installation of Norton Secure VPN via the Microsoft StoreGen Digital · Norton Secure VPN | High8.8 |
| CVE-2026-20911 | A heap-based buffer overflow vulnerability exists in the HuffTable::initval functionality of LibRaw Commit 0b56545 and Commit d20315b. A specially crafted…LibRaw · LibRaw | Critical9.8 |