Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,126All CVEsplus 19,141 rejected
- 319Last 24 hours3,306 in the last 7 days
- 16,921Last 30 days1,560 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 6 | 11 | 16 | 3 | 0 | 36 | 45 |
| 2025 | 0 | 0 | 0 | 1 | 0 | 1 | 9 |
| 2024 | 0 | 4 | 1 | 0 | 0 | 5 | 8 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 3 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2020 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-59314 | Spring Framework response splitting in ContentDispositionSpring · Spring Framework | Low3.7 |
| CVE-2026-59313 | Server Sent Event stream corruption in Spring MVC functional web frameworkSpring · Spring Framework | Critical9.8 |
| CVE-2026-59283 | Spring Framework Safety Guard Bypass via SpEL Expression CompilationSpring · Spring Framework | Critical9.1 |
| CVE-2026-59282 | Spring Framework Denial of Service via Unbounded List Growth in Data BindingSpring · Spring Framework | High7.5 |
| CVE-2026-59281 | Spring Framework Cross-site Scripting via EscapedErrorsSpring · Spring Framework | Medium6.1 |
| CVE-2026-59280 | Spring Framework Path Traversal via Backslash in SpringTemplateLoaderSpring · Spring Framework | Medium4.3 |
| CVE-2026-47893 | Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketServiceSpring · Spring Framework | High7.5 |
| CVE-2026-47892 | Spring Framework Header Predicate Bypass in WebFlux Functional EndpointsSpring · Spring Framework | Critical9.8 |
| CVE-2026-47891 | Spring Framework maxInMemorySize Bypassed in Jaxb2DecoderSpring · Spring Framework | Critical9.8 |
| CVE-2026-47890 | Spring Framework Server Sent Event stream corruption while rendering fragmentsSpring · Spring Framework | Critical9.8 |
| CVE-2026-47889 | Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponseSpring · Spring Framework | High7.5 |
| CVE-2026-47888 | Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandlerSpring · Spring Framework | High7.5 |
| CVE-2026-47887 | Spring Framework Open Redirect in UrlFileNameViewControllerSpring · Spring Framework | Medium6.1 |
| CVE-2026-47886 | Spring Framework Denial of Service via Unbounded Exponentiation in SpEL ExpressionsSpring · Spring Framework | High7.5 |
| CVE-2026-47885 | Spring Framework maxPartSize Ignored in PartEventHttpMessageReaderSpring · Spring Framework | High7.5 |
| CVE-2026-47884 | Spring Framework Improper Path Limitation in XsltViewSpring · Spring Framework | Critical9.8 |
| CVE-2026-47883 | Spring Framework Open Redirect in UrlHandlerFilterSpring · Spring Framework | Medium6.1 |
| CVE-2026-41855 | Spring Framework Unsafe Deserialization via Jackson JMS ConvertersSpring · Spring Framework | High8.1 |
| CVE-2026-41854 | Spring Framework Server-Side Request Forgery via UriComponentsBuilderSpring · Spring Framework | Medium4.2 |
| CVE-2026-41853 | Spring Framework Multipart Request Smuggling in Spring MVC and WebFluxSpring · Spring Framework | Medium5.3 |
| CVE-2026-41852 | Spring Framework Arbitrary Method Invocation in SpEL ExpressionsSpring · Spring Framework | Low3.7 |
| CVE-2026-41851 | Spring Framework Denial of Service via Unbounded Cache in SpELSpring · Spring Framework | Medium5.3 |
| CVE-2026-41850 | Spring Framework Algorithmic Denial of Service via SpEL ExpressionsSpring · Spring Framework | High7.5 |
| CVE-2026-41849 | Spring Framework Denial of Service via Integer Overflow in SpEL ExpressionsSpring · Spring Framework | High7.5 |
| CVE-2026-41848 | Spring Framework Denial of Service via AntPathMatcherSpring · Spring Framework | Low3.7 |
| CVE-2026-41847 | Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSLSpring · Spring Framework | Medium4.8 |
| CVE-2026-41846 | Spring Framework Cross-site Scripting via JSP Form TagsSpring · Spring Framework | Medium5.9 |
| CVE-2026-41845 | Spring Framework Cross-site Scripting via JavaScriptUtilsSpring · Spring Framework | High7.1 |
| CVE-2026-41844 | Spring Framework Open Redirect in Spring MVC and WebFluxSpring · Spring Framework | Medium4.2 |
| CVE-2026-41843 | Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxSpring · Spring Framework | Medium5.9 |
| CVE-2026-41842 | Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFluxSpring · Spring Framework | High7.5 |
| CVE-2026-41841 | Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxSpring · Spring Framework | Medium5.9 |
| CVE-2026-41840 | Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0…Spring · Spring Framework | Medium5.9 |
| CVE-2026-41839 | Spring Framework Escalation via Session Fixation in WebFluxSpring · Spring Framework | Medium4.2 |
| CVE-2026-41838 | Spring Framework Predictable Session ID in WebSocket ModuleSpring · Spring Framework | Medium4.8 |
| CVE-2026-22737 | Spring Framework Improper Path Limitation with Script View TemplatesSpring · Spring Framework | Medium5.9 |
| CVE-2025-22233 | Spring Framework DataBinder Case Sensitive Match ExceptionSpring · Spring Framework | Low3.1 |
| CVE-2024-38808 | CVE-2024-38808: Spring Expression DoS VulnerabilitySpring · Spring Framework | Medium4.3 |
| CVE-2024-22262 | CVE-2024-22262: Spring Framework URL Parsing with Host ValidationSpring · Spring Framework | High8.1 |
| CVE-2024-22259 | CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)Spring · Spring Framework | High8.1 |
| CVE-2024-22243 | CVE-2024-22243: Spring Framework URL Parsing with Host ValidationSpring · Spring Framework | High8.1 |
| CVE-2024-22233 | CVE-2024-22233: Spring Framework server Web DoS VulnerabilitySpring · Spring Framework | High7.5 |
| CVE-2023-34053 | Spring Framework server Web Observations DoS VulnerabilitySpring · Spring Framework | Medium5.3 |
| CVE-2020-5397 | CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxSpring · Spring Framework | Medium5.3 |
| CVE-2020-5398 | RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationSpring · Spring Framework | High8.0 |