Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,801All CVEsplus 19,156 rejected
- 521Last 24 hours3,405 in the last 7 days
- 17,084Last 30 days1,518 of them critical
- 1,773Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 4 | 1 | 0 | 6 | 20 |
| 2025 | 0 | 3 | 4 | 1 | 0 | 8 | 14 |
| 2024 | 0 | 4 | 2 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-68923 | MobSF: CSRF checks not enforced after Django migrationMobSF · Mobile-Security-Framework-MobSF | Medium6.5 |
| CVE-2026-68927 | MobSF: SSRF port restriction bypass in assetlinks_checkPublic exploitMobSF · Mobile-Security-Framework-MobSF | Low3.0 |
| CVE-2026-68922 | MobSF: Arbitrary File Read via Path Traversal in ZIP UploadsPublic exploitMobSF · Mobile-Security-Framework-MobSF | Medium5.5 |
| CVE-2026-68924 | MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK ExtractionPublic exploitMobSF · Mobile-Security-Framework-MobSF | Medium4.9 |
| CVE-2026-33545 | MobSF has SQL Injection in its SQLite Database Viewer UtilsPublic exploitMobSF · Mobile-Security-Framework-MobSF | Medium5.3 |
| CVE-2026-24490 | MobSF has Stored XSS via Manifest Analysis - Dialer Code Host FieldPublic exploitMobSF · Mobile-Security-Framework-MobSF | High8.1 |
| CVE-2025-58162 | MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a ExtractionPublic exploitMobSF · Mobile-Security-Framework-MobSF | Medium6.5 |
| CVE-2025-58161 | MobSF Path Traversal in GET /download/<filename> using absolute filenamesPublic exploitMobSF · Mobile-Security-Framework-MobSF | Low1.3 |
| CVE-2025-46730 | Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death AttackPublic exploitMobSF · Mobile-Security-Framework-MobSF | Medium6.8 |
| CVE-2025-46335 | Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon UploadPublic exploitMobSF · Mobile-Security-Framework-MobSF | High8.6 |
| CVE-2025-31116 | Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS RebindingPublic exploitMobSF · Mobile-Security-Framework-MobSF | Medium4.4 |
| CVE-2025-24803 | Stored Cross-Site Scripting (XSS) in MobSFPublic exploitMobSF · Mobile-Security-Framework-MobSF | High8.4 |
| CVE-2025-24804 | Partial Denial of Service (DoS) in MobSFPublic exploitMobSF · Mobile-Security-Framework-MobSF | Medium4.8 |
| CVE-2025-24805 | Local Privilege Escalation in MobSFPublic exploitMobSF · Mobile-Security-Framework-MobSF | High8.5 |
| CVE-2024-53999 | Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" FunctionalityPublic exploitMobSF · Mobile-Security-Framework-MobSF | High8.1 |
| CVE-2024-54000 | Mobile Security Framework (MobSF) bypass of SSRF fixPublic exploitMobSF · Mobile-Security-Framework-MobSF | High7.5 |
| CVE-2024-43399 | Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library FilesPublic exploitMobSF · Mobile-Security-Framework-MobSF | High8.0 |
| CVE-2024-41955 | Mobile Security Framework (MobSF) has an Open Redirect in Login RedirectPublic exploitMobSF · Mobile-Security-Framework-MobSF | Medium5.2 |
| CVE-2024-31215 | Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database checkMobSF · Mobile-Security-Framework-MobSF | Medium6.3 |
| CVE-2024-29190 | MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns)Public exploitMobSF · Mobile-Security-Framework-MobSF | High7.5 |