Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,750All CVEsplus 19,170 rejected
  • 378Last 24 hours4,866 in the last 7 days
  • 16,927Last 30 days1,491 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202602400610
20250100014
20240010013
20230010012
20220000001
20210000001
20200100011

Latest CVEs

10 CVEs, newest first

CVEs, newest first
Title
CVE-2026-63727
Anchore Enterprise Privilege Escalation via User Management APIAnchore · Anchore Enterprise
High8.7
CVE-2026-33481
Syft improper temporary file cleanupanchore · syft
Medium5.3
CVE-2026-25076
Anchore Enterprise GraphQL Reports API SQL injectionAnchore · Anchore Enterprise
High8.5
CVE-2026-31961
Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsinganchore · quill
Medium5.5
CVE-2026-31960
DoS in Quill via unbounded read of HTTP response body during notarizationanchore · quill
Medium5.3
CVE-2026-31959
SSRF in Quill via unvalidated URL from Apple notarization log retrievalanchore · quill
Medium5.3
CVE-2025-65965
Grype has a credential disclosure vulnerability in Grype JSON outputanchore · grype
High8.2
CVE-2024-24579
Tar path traversal in stereoscope when processing OCI tar archivesPublic exploitanchore · stereoscope
Medium5.3
CVE-2023-24827
Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syftPublic exploitanchore · syft
Medium6.5
CVE-2020-11075
Shell Escape in Anchore Engineanchore · anchore-engine
High7.7