Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 404,584All CVEsplus 19,156 rejected
- 2,038Last 24 hours4,620 in the last 7 days
- 18,744Last 30 days1,590 of them critical
- 1,773Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 12 |
| 2025 | 0 | 0 | 5 | 0 | 0 | 5 | 12 |
| 2024 | 1 | 1 | 0 | 0 | 0 | 2 | 7 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 5 |
| 2022 | 0 | 0 | 4 | 0 | 0 | 4 | 5 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2020 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2025-27371 | In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities…IETF · RFC 7523 | Medium6.9 |
| CVE-2024-7596 | Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packetIETF · draft-ietf-intarea-gue-09 | Medium5.3 |
| CVE-2024-7595 | GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packetIETF · RFC2784 - Generic Routing Encapsulation (GRE) | Medium5.3 |
| CVE-2025-23019 | IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface.IETF · IPv6 | Medium5.4 |
| CVE-2025-23018 | IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a network packet, allowing an attacker to…IETF · IPv6 | Medium5.4 |
| CVE-2024-3596 | RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.IETF · RFC | Critical9.0 |
| CVE-2024-3661 | DHCP routing options can manipulate interface-based VPN trafficIETF · DHCP | High7.6 |
| CVE-2021-27862 | L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translationIEEE · 802.2 | Medium4.7 |
| CVE-2021-27861 | L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengthsIEEE · 802.2 | Medium4.7 |
| CVE-2021-27854 | L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translationIETF · P802.1Q | Medium4.7 |
| CVE-2021-27853 | L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headersIEEE · 802.2 | Medium4.7 |
| CVE-2020-10136 | IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network trafficIETF · RFC2003 - IP Encapsulation within IP | Medium5.3 |