Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,325All CVEsplus 19,143 rejected
- 293Last 24 hours3,274 in the last 7 days
- 16,936Last 30 days1,543 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 9 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 9 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 9 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 8 |
| 2018 | 1 | 2 | 5 | 0 | 0 | 8 | 8 |
| Title | ||
|---|---|---|
| CVE-2024-22362 | Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a…Drupal.org · Drupal | High7.5 |
| CVE-2017-6920 | Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during…Drupal.org · Drupal Core | Critical9.8 |
| CVE-2017-6932 | Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in…Drupal.org · Drupal Core | Medium4.7 |
| CVE-2017-6931 | In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update certain data that they do not have the…Drupal.org · Drupal Core | Medium6.5 |
| CVE-2017-6930 | In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the…Drupal.org · Drupal Core | High8.1 |
| CVE-2017-6929 | A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by the fact that it…Drupal.org · Drupal Core | Medium6.1 |
| CVE-2017-6928 | Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the…Drupal.org · Drupal Core | Medium5.3 |
| CVE-2017-6927 | Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain() JavaScript function which is used to escape potentially…Drupal.org · Drupal Core | Medium6.1 |
| CVE-2017-6926 | In Drupal versions 8.4.x versions before 8.4.5 users with permission to post comments are able to view content and comments they do not have access to, and are…Drupal.org · Drupal Core | High8.1 |