Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,131All CVEsplus 19,141 rejected
- 324Last 24 hours3,295 in the last 7 days
- 16,925Last 30 days1,559 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 4 | 0 | 0 | 4 | 22 |
| 2025 | 0 | 0 | 12 | 0 | 0 | 12 | 18 |
| 2024 | 0 | 0 | 4 | 0 | 0 | 4 | 6 |
| 2023 | 0 | 0 | 1 | 1 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-102290 | CodeCanyon Rocket LMS Student Profile Image Upload cross site scriptingPublic exploitCodeCanyon · Rocket LMS | Medium5.1 |
| CVE-2026-19966 | CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorizationPublic exploitCodeCanyon · TimeCamp Integration for CRM | Medium5.3 |
| CVE-2026-7783 | CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injectionPublic exploitCodeCanyon · Perfex CRM | Medium5.3 |
| CVE-2026-7782 | CodeCanyon Perfex CRM Tenant Clients.php project authorizationPublic exploitCodeCanyon · Perfex CRM | Medium5.3 |
| CVE-2025-13239 | Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflowPublic exploitBdtask · Isshue Multi Store eCommerce Shopping Cart Solution | Medium5.3 |
| CVE-2025-13186 | Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scriptingPublic exploitBdtask · Isshue Multi Store eCommerce Shopping Cart Solution | Medium4.8 |
| CVE-2025-13185 | Bdtask/CodeCanyon News365 profile unrestricted uploadPublic exploitBdtask · News365 | Medium5.1 |
| CVE-2025-13180 | Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scriptingPublic exploitBdtask · Wholesale Inventory Control and Inventory Management System | Medium5.1 |
| CVE-2025-13179 | Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgeryPublic exploitBdtask · Wholesale Inventory Control and Inventory Management System | Medium5.3 |
| CVE-2025-13178 | Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scriptingPublic exploitBdtask · SalesERP | Medium5.1 |
| CVE-2025-13177 | Bdtask/CodeCanyon SalesERP cross-site request forgeryPublic exploitBdtask · SalesERP | Medium5.3 |
| CVE-2025-11304 | CodeCanyon/ui-lib Mentor LMS API cross-domain policyPublic exploitCodeCanyon · Mentor LMS | Medium5.3 |
| CVE-2025-7898 | Codecanyon iDentSoft Account Setting Page updateSetting unrestricted uploadPublic exploitCodecanyon · iDentSoft | Medium5.1 |
| CVE-2025-3855 | CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injectionPublic exploitCodeCanyon · RISE Ultimate Project Manager | Medium5.3 |
| CVE-2025-3219 | CodeCanyon Perfex CRM Project Discussions Module 2 cross site scriptingPublic exploitCodeCanyon · Perfex CRM | Medium5.1 |
| CVE-2025-2974 | CodeCanyon Perfex CRM Contracts contract cross site scriptingPublic exploitCodeCanyon · Perfex CRM | Medium5.1 |
| CVE-2024-9031 | CodeCanyon CRMGo SaaS show cross site scriptingPublic exploitCodeCanyon · CRMGo SaaS | Medium5.3 |
| CVE-2024-9030 | CodeCanyon CRMGo SaaS note cross site scriptingPublic exploitCodeCanyon · CRMGo SaaS | Medium5.3 |
| CVE-2024-8945 | CodeCanyon RISE Ultimate Project Manager save sql injectionPublic exploitCodeCanyon · RISE Ultimate Project Manager | Medium5.3 |
| CVE-2024-0545 | CodeCanyon RISE Ultimate Project Manager signin redirectCodeCanyon · RISE Ultimate Project Manager | Medium6.9 |
| CVE-2023-4407 | Codecanyon Credit Lite POST Request account_statement sql injectionCodecanyon · Credit Lite | Medium6.3 |
| CVE-2023-3787 | Codecanyon Tiva Events Calender cross site scriptingPublic exploitCodecanyon · Tiva Events Calender | Low3.5 |