Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 404,709All CVEsplus 19,156 rejected
- 2,117Last 24 hours4,709 in the last 7 days
- 18,865Last 30 days1,619 of them critical
- 1,773Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 138 | 517 | 466 | 13 | 0 | 1,134 | 5,219 |
| 2025 | 25 | 275 | 519 | 10 | 0 | 829 | 4,085 |
| 2024 | 14 | 237 | 491 | 11 | 0 | 753 | 3,256 |
| 2023 | 12 | 259 | 394 | 16 | 0 | 681 | 2,503 |
| 2022 | 9 | 262 | 167 | 22 | 0 | 460 | 1,822 |
| 2021 | 20 | 246 | 113 | 53 | 0 | 432 | 1,362 |
| 2020 | 58 | 201 | 75 | 14 | 0 | 348 | 930 |
| 2019 | 175 | 208 | 78 | 0 | 0 | 461 | 582 |
| 2018 | 11 | 64 | 46 | 0 | 0 | 121 | 121 |
| Title | ||
|---|---|---|
| CVE-2026-123259 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe · Adobe Experience Manager as a Cloud Service | Medium5.4 |
| CVE-2026-123258 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe · Adobe Experience Manager as a Cloud Service | Medium5.4 |
| CVE-2026-119017 | Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe · Adobe Experience Manager 6.5 | Critical9.9 |
| CVE-2026-118482 | Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe · Adobe Experience Manager 6.5 | Medium5.4 |
| CVE-2026-118481 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe · Adobe Experience Manager 6.5 | Medium5.4 |
| CVE-2026-118480 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe · Adobe Experience Manager 6.5 | Medium5.4 |
| CVE-2026-118479 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe · Adobe Experience Manager 6.5 | Medium5.4 |
| CVE-2026-118478 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe · Adobe Experience Manager as a Cloud Service | Medium5.4 |
| CVE-2026-118197 | Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe · Adobe Experience Manager as a Cloud Service | Medium5.4 |
| CVE-2026-114372 | Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe · Adobe Experience Manager as a Cloud Service | Medium5.4 |
| CVE-2026-114371 | Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe · Adobe Experience Manager as a Cloud Service | Critical9.9 |
| CVE-2026-113580 | Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe · Adobe Experience Manager as a Cloud Service | Critical9.9 |
| CVE-2026-113579 | Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe · Adobe Experience Manager as a Cloud Service | Critical9.9 |
| CVE-2026-123341 | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe · Adobe Experience Manager as a Cloud Service | Medium5.4 |
| CVE-2026-121898 | Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe · Adobe Connect | Critical9.9 |
| CVE-2026-121896 | Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe · Adobe Connect | Critical9.9 |
| CVE-2026-121913 | Adobe Connect | Incorrect Authorization (CWE-863)Adobe · Adobe Connect | High8.8 |
| CVE-2026-121908 | Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe · Adobe Connect | Critical9.9 |
| CVE-2026-121352 | Adobe Connect | Incorrect Authorization (CWE-863)Adobe · Adobe Connect | Critical10.0 |
| CVE-2026-121912 | Adobe Connect | Cross-site Scripting (XSS) (CWE-79)Adobe · Adobe Connect | Medium5.4 |
| CVE-2026-121887 | Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe · Adobe Connect | Critical9.9 |
| CVE-2026-121350 | Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe · Adobe Connect | High7.7 |
| CVE-2026-121349 | Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe · Adobe Connect | Critical9.6 |
| CVE-2026-121910 | Adobe Connect | Cross-site Scripting (XSS) (CWE-79)Adobe · Adobe Connect | Medium5.4 |
| CVE-2026-121900 | Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe · Adobe Connect | High8.3 |
| CVE-2026-121355 | Adobe Connect | Incorrect Authorization (CWE-863)Adobe · Adobe Connect | Critical9.1 |
| CVE-2026-121351 | Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe · Adobe Connect | Critical10.0 |
| CVE-2026-121889 | Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)Adobe · Adobe Connect | Critical10.0 |
| CVE-2026-121894 | Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe · Adobe Connect | Critical9.9 |
| CVE-2026-121356 | Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)Adobe · Adobe Connect | Critical10.0 |
| CVE-2026-121906 | Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe · Adobe Connect | Critical9.9 |
| CVE-2026-121353 | Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93)Adobe · Adobe Connect | Critical10.0 |
| CVE-2026-121904 | Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe · Adobe Connect | Critical9.6 |
| CVE-2026-121890 | Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe · Adobe Connect | High7.7 |
| CVE-2026-121902 | Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe · Adobe Connect | Critical9.4 |
| CVE-2026-121354 | Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe · Adobe Connect | Critical9.9 |
| CVE-2026-121892 | Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe · Adobe Connect | Critical9.9 |
| CVE-2026-122102 | Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe · Adobe Connect | High8.7 |
| CVE-2026-118483 | Dimension | Improper Input Validation (CWE-20)Adobe · Adobe Dimension | High8.2 |
| CVE-2026-122100 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe · Content Credentials Rust SDK | Medium5.5 |
| CVE-2026-118484 | CAI Content Credentials | Improper Input Validation (CWE-20)Adobe · Content Credentials Rust SDK | Medium6.5 |
| CVE-2026-113573 | CAI Content Credentials | Improper Input Validation (CWE-20)Adobe · Content Credentials Rust SDK | Medium5.9 |
| CVE-2026-122097 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe · Content Credentials Rust SDK | Medium6.5 |
| CVE-2026-113572 | CAI Content Credentials | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)Adobe · Content Credentials Rust SDK | Medium5.9 |
| CVE-2026-122098 | CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe · Content Credentials Rust SDK | Medium5.1 |
| CVE-2026-123262 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe · Content Credentials Rust SDK | Medium5.9 |
| CVE-2026-123261 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe · Content Credentials Rust SDK | Medium5.9 |
| CVE-2026-123267 | CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe · Content Credentials Rust SDK | Medium5.5 |
| CVE-2026-113574 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe · Content Credentials Rust SDK | Medium4.0 |
| CVE-2026-123260 | CAI Content Credentials | Improper Input Validation (CWE-20)Adobe · Content Credentials Rust SDK | Medium4.0 |