Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,465All CVEsplus 19,159 rejected
- 639Last 24 hours4,914 in the last 7 days
- 18,832Last 30 days1,596 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 1 | 0 | 0 | 2 | 38 |
| 2025 | 2 | 7 | 26 | 0 | 0 | 35 | 36 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-105046 | Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.Kentico · Xperience | Medium4.3 |
| CVE-2025-5591 | Stored Cross-site Scripting (XSS) in Kentico Xperience 13Kentico · Kentico Xperience | High7.7 |
| CVE-2024-58323 | Kentico Xperience <= 13.0.158 Checkbox Form Component Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2024-58322 | Kentico Xperience <= 13.0.158 Shipping Options Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2024-58321 | Kentico Xperience <= 13.0.159 Form Validation Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2024-58320 | Kentico Xperience <= 13.0.159 Authentication Information DisclosureKentico · Xperience | Medium6.9 |
| CVE-2024-58319 | Kentico Xperience <= 13.0.160 Pages Dashboard Widget Reflected XSSKentico · Xperience | Medium5.1 |
| CVE-2024-58318 | Kentico Xperience <= 13.0.162 Rich Text Editor Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2024-58317 | Kentico Xperience <= 13.0.164 Cookie Security ConfigurationKentico · Xperience | Medium6.9 |
| CVE-2023-53934 | Kentico Xperience <= 12.0.98 GetResource Handler Denial of ServiceKentico · Xperience | High8.7 |
| CVE-2023-53738 | Kentico Xperience <= 13.0.109 Page Preview Reflected XSSKentico · Xperience | Medium5.1 |
| CVE-2023-53737 | Kentico Xperience <= 13.0.101 Localization Application Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2023-53736 | Kentico Xperience <= 13.0.120 Administration Interface Reflected XSSKentico · Xperience | Medium5.1 |
| CVE-2022-50686 | Kentico Xperience <= 12.0 Portal Engine Form Control Information DisclosureKentico · Xperience | Medium6.9 |
| CVE-2022-50685 | Kentico Xperience <= 13.0.56 File Upload Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2022-50684 | Kentico Xperience <= 13.0.71 Form Emails HTML InjectionKentico · Xperience | Medium5.1 |
| CVE-2022-50683 | Kentico Xperience <= 13.0.74 Form Configuration Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2022-50682 | Kentico Xperience <= 13.0.79 Routing Engine CRLF InjectionKentico · Xperience | Medium6.9 |
| CVE-2022-50681 | Kentico Xperience <= 13.0.88 Rich Text Editor Reflected XSSKentico · Xperience | Medium5.1 |
| CVE-2022-50680 | Kentico Xperience <= 13.0.92 Email Marketing Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2021-47712 | Kentico Xperience <= 12.0.102 URL Hashing Cryptography VulnerabilityKentico · Xperience | Medium6.9 |
| CVE-2021-47711 | Kentico Xperience <= 13.0.52 Online Marketing Macros SQL InjectionKentico · Xperience | High8.7 |
| CVE-2020-36891 | Kentico Xperience <= 12.0.49 File Upload Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2020-36890 | Kentico Xperience <= 10 Administrator Access Control BypassKentico · Xperience | High8.6 |
| CVE-2020-36889 | Kentico Xperience <= 12.0.90 Administration Interface Stored XSSKentico · Xperience | Medium5.1 |
| CVE-2019-25230 | Kentico Xperience <= 12.0.0 User Widget Information DisclosureKentico · Xperience | Medium5.3 |
| CVE-2019-25229 | Kentico Xperience <= 12.0.29 MVC Forms Unrestricted File UploadKentico · Xperience | High8.7 |
| CVE-2019-25228 | Kentico Xperience <= 12.0.47 Virtual Context Information DisclosureKentico · Xperience | Medium5.1 |
| CVE-2025-32370 | Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed…Public exploitKentico · Xperience | High7.2 |
| CVE-2025-32369 | Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library…Public exploitKentico · Xperience | Medium6.4 |
| CVE-2025-2794 | Kentico Xperience <= 13.0.180 Unsafe ReflectionKentico · Xperience | High8.7 |
| CVE-2025-2878 | Kentico CMS Additional Database Installation Wizard install.aspx cross site scriptingKentico · CMS | Medium4.8 |
| CVE-2025-2748 | Kentico Xperience stored cross-site scripting in multiple-file upload functionalityPublic exploitKentico · Xperience | Medium6.1 |
| CVE-2025-2749 | Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCEExploitedPublic exploitKentico · Xperience | High7.2 |
| CVE-2025-2747 | Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication BypassExploitedPublic exploitKentico · Xperience | Critical9.8 |
| CVE-2025-2746 | Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication BypassExploitedPublic exploitKentico · Xperience | Critical9.8 |
| CVE-2024-12907 | XSS in Kentico 7Kentico · Kentico CMS | Medium5.3 |
| CVE-2021-43991 | Persistent XSS via Avatar Upload in Kentico Xperience CMSKentico · Kentico Xperience XMS | Medium6.8 |