Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,737All CVEsplus 19,156 rejected
- 581Last 24 hours3,413 in the last 7 days
- 17,098Last 30 days1,528 of them critical
- 1,772Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 42 | 80 | 44 | 0 | 0 | 166 | 944 |
| 2025 | 50 | 68 | 29 | 0 | 0 | 147 | 778 |
| 2024 | 51 | 73 | 43 | 2 | 0 | 169 | 631 |
| 2023 | 39 | 59 | 23 | 1 | 0 | 122 | 462 |
| 2022 | 15 | 31 | 41 | 2 | 0 | 89 | 340 |
| 2021 | 42 | 39 | 83 | 1 | 0 | 165 | 251 |
| 2020 | 11 | 33 | 14 | 0 | 0 | 58 | 86 |
| 2019 | 17 | 6 | 5 | 0 | 0 | 28 | 28 |
| Title | ||
|---|---|---|
| CVE-2026-121818 | About Time Technologies｜Herowatch Go - Security MisconfigurationAbout Time Technologies · Herowatch Go | High8.5 |
| CVE-2026-121817 | About Time Technologies｜Herowatch Go Server - Insecure Direct Object ReferenceAbout Time Technologies · Herowatch Go Server | High8.7 |
| CVE-2026-121816 | About Time Technologies｜Herowatch Mini - Missing AuthenticationAbout Time Technologies · Herowatch Mini | High8.7 |
| CVE-2026-114223 | NewType Infortech｜NT OneAPP - Exposure of Sensitive InformationNewType Infortech · NT OneAPP | Medium6.7 |
| CVE-2026-114222 | NewType Infortech｜NT OneAPP - Authentication BypassNewType Infortech · NT OneAPP | Medium6.9 |
| CVE-2026-114221 | NewType Infortech｜NT OneAPP - Credential DisclosureNewType Infortech · NT OneAPP | Medium5.9 |
| CVE-2026-114220 | NewType Infortech｜NT OneAPP - Improper Certificate ValidationNewType Infortech · NT OneAPP | Critical9.3 |
| CVE-2026-114219 | NewType Infortech｜NT OneAPP - Hard-coded CredentialsNewType Infortech · NT OneAPP | Critical9.1 |
| CVE-2026-113407 | YS-infoware｜BA-Workflow - SQL InjectionYS-infoware · BA-Workflow | High8.7 |
| CVE-2026-113406 | YS-infoware｜BA-Workflow - SQL InjectionYS-infoware · BA-Workflow | High8.7 |
| CVE-2026-113405 | YS-infoware｜BA-Workflow - SQL InjectionYS-infoware · BA-Workflow | High8.7 |
| CVE-2026-113403 | ArmorX Global Technology｜ArmorX Spam - Command InjectionArmorX Global Technology · ArmorX Spam | High7.1 |
| CVE-2026-113402 | ArmorX Global Technology｜ArmorX Spam - Local File InclusionArmorX Global Technology · ArmorX Spam | High7.1 |
| CVE-2026-113404 | Uniong｜WebITR - Insecure DeserializationUniong · WebITR | High8.7 |
| CVE-2026-110467 | WisdomGarden｜Tronclass - Insecure Direct Object ReferenceWisdomGarden · Tronclass | Medium5.3 |
| CVE-2026-110466 | WisdomGarden｜Tronclass - Sensitive Data ExposureWisdomGarden · Tronclass | Medium5.3 |
| CVE-2026-110465 | WisdomGarden｜Tronclass - Insecure Direct Object ReferenceWisdomGarden · Tronclass | Medium5.3 |
| CVE-2026-110445 | TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code InjectionTEAMPLUS TECHNOLOGY · TeamPlus Messenger | High8.6 |
| CVE-2026-110444 | TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code InjectionTEAMPLUS TECHNOLOGY · TeamPlus Messenger | High8.6 |
| CVE-2026-107459 | Openfind｜SecuShare Pro - OS Command InjectionOpenfind · SecuShare Pro | Critical9.3 |
| CVE-2026-102459 | DigiWin｜EasyFlow .NET - Reflected Cross-site ScriptingDigiWin · EasyFlow .NET | Medium5.1 |
| CVE-2026-102458 | DigiWin｜EasyFlow .NET - Missing AuthenticationDigiWin · EasyFlow .NET | Critical9.3 |
| CVE-2026-102457 | DigiWin｜EasyFlow .NET - Arbitrary File ReadDigiWin · EasyFlow .NET | High7.1 |
| CVE-2026-102456 | DigiWin｜EasyFlow .NET - SQL InjectionDigiWin · EasyFlow .NET | High7.1 |
| CVE-2026-102455 | DigiWin｜EasyFlow .NET - Insecure DeserializationDigiWin · EasyFlow .NET | Critical9.3 |
| CVE-2026-102454 | DigiWin｜EasyFlow .NET - Arbitrary File UploadDigiWin · EasyFlow .NET | High8.6 |
| CVE-2026-97181 | ezGlobal｜GPM LIGHT - Sensitive Data ExposureezGlobal · GPM LIGHT | Medium6.9 |
| CVE-2026-15027 | Changing｜CGServiSign - OS Command InjectionChanging · CGServiSign | High8.6 |
| CVE-2026-93468 | HGiga｜OAKlouds - Arbitrary File ReadHGiga · OAKlouds-bulletin_v3-2.0 | High8.7 |
| CVE-2026-93467 | HGiga｜OAKlouds - Insecure DeserializationHGiga · OAKlouds-custom_page-2.0 | Critical9.3 |
| CVE-2026-90891 | ASRock｜ASRock Polychrome SYNC/RGB software utility - Improper Access ControlASRock · ASRock Polychrome SYNC/RGB for MB | Medium6.8 |
| CVE-2026-90890 | ASRock｜ASRock Polychrome SYNC/RGB software utility - Untrusted Pointer DereferenceASRock · ASRock Polychrome SYNC/RGB for MB | Medium6.8 |
| CVE-2026-89180 | Thinking Software Technology｜EFence - SQL InjectionThinking Software Technology · EFence | High8.7 |
| CVE-2026-89179 | Howyar｜WeenyGenius - Missing Support for Integrity CheckHowyar · WeenyGenius | Medium5.3 |
| CVE-2026-89178 | Howyar｜WeenyGenius - Origin Validation ErrorHowyar · WeenyGenius | High8.7 |
| CVE-2026-89177 | Howyar｜WeenyGenius - Use of Insecure ProtocolHowyar · WeenyGenius | High8.7 |
| CVE-2026-89176 | Howyar｜WeenyGenius - Missing AuthenticationHowyar · WeenyGenius | High8.7 |
| CVE-2026-89175 | Kingdom Communication Associated｜Smart Video Intercom System - Client-Side AuthenticationKingdom Communication Associated · EH3040 | Medium6.9 |
| CVE-2026-89174 | Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force ProtectionKingdom Communication Associated · EH3040 | High8.7 |
| CVE-2026-89173 | Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data ExposureKingdom Communication Associated · EH3040 | Medium6.9 |
| CVE-2026-87747 | Ragic｜Enterprise Cloud Database - Arbitrary File ReadRagic · Enterprise Cloud Database | Medium6.9 |
| CVE-2026-85541 | Interinfo｜DreamMaker - Reflected Cross-site ScriptingInterinfo · DreamMaker | Medium4.8 |
| CVE-2026-85540 | Interinfo｜DreamMaker - SQL InjectionInterinfo · DreamMaker | High8.7 |
| CVE-2026-85149 | Lightstar｜SmartIT Desktop Manager - Use of Hard-coded CredentialsLightstar · SmartIT Desktop Manager | Medium6.9 |
| CVE-2026-85148 | Lightstar｜SmartIT Desktop Manager - Use of Hard-coded CredentialsLightstar · SmartIT Desktop Manager | Critical9.3 |
| CVE-2026-85147 | Lightstar｜SmartIT Desktop Manager - Use of Hard-coded CredentialsLightstar · SmartIT Desktop Manager | High8.7 |
| CVE-2026-85146 | Lightstar｜SmartIT Desktop Manager - Use of Hard-coded CredentialsLightstar · SmartIT Desktop Manager | Critical9.3 |
| CVE-2026-82181 | Le-yan｜Medical Practice Management System - Sensitive Data in URLLe-yan · Medical Practice Management System | Medium6.8 |
| CVE-2026-82082 | Green-Computing｜NUMail - OS Command InjectionGreen-Computing · NUMail | Critical9.3 |
| CVE-2026-80237 | Thinking Software Technology｜Efence - Arbitrary File UploadThinking Software Technology · Efence | High8.7 |