Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,826All CVEsplus 19,170 rejected
  • 354Last 24 hours4,870 in the last 7 days
  • 16,866Last 30 days1,489 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260510067
20250010011

Latest CVEs

7 CVEs, newest first

CVEs, newest first
Title
CVE-2026-61823
code16 Sharp vulnerable to stored XSS via iframe srcdoc Attributecode16 · sharp
High7.3
CVE-2026-61825
code16/sharp has a stored XSS via data-html-content Sanitizer Bypasscode16 · sharp
High8.7
CVE-2026-44692
Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpointcode16 · sharp
High7.7
CVE-2026-53634
Sharp: Missing Authorization Check in Quick Creation Command Endpointscode16 · sharp
Medium4.3
CVE-2026-33686
Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtilcode16 · sharp
High8.8
CVE-2026-33687
Sharp has Unrestricted File Upload via Client-Controlled Validation Rulescode16 · sharp
High8.8
CVE-2025-62798
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntaxcode16 · sharp
Medium5.4