Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,517All CVEsplus 19,172 rejected
- 773Last 24 hours5,190 in the last 7 days
- 16,918Last 30 days1,484 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 1 | 1 | 0 | 2 | 33 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 31 |
| 2024 | 8 | 4 | 12 | 0 | 0 | 24 | 31 |
| 2023 | 1 | 2 | 2 | 0 | 0 | 5 | 7 |
| 2022 | 1 | 1 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-108961 | PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injectionPaddlePaddle · PaddleX | Medium5.3 |
| CVE-2026-10800 | PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hashPaddlePaddle · FastDeploy | Low2.0 |
| CVE-2024-1603 | confirmedPublic exploitpaddlepaddle · paddlepaddle/paddle | High8.2 |
| CVE-2024-0818 | Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6Public exploitpaddlepaddle · paddlepaddle/paddle | Critical9.1 |
| CVE-2024-0917 | remote code execution in paddlepaddle/paddle 2.6.0paddlepaddle · paddlepaddle/paddle | Critical9.4 |
| CVE-2024-0815 | Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0Public exploitpaddlepaddle · paddlepaddle/paddle | Critical9.3 |
| CVE-2024-0817 | Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0Public exploitpaddlepaddle · paddlepaddle/paddle | Critical9.3 |
| CVE-2024-0521 | Code Injection in paddlepaddle/paddlePublic exploitpaddlepaddle · paddlepaddle/paddle | Critical9.3 |
| CVE-2023-52314 | Command injection in convert_shape_comparePublic exploitPaddlePaddle · PaddlePaddle | Critical9.6 |
| CVE-2023-52313 | FPE in paddle.argmin and paddle.argmaxPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-52312 | Null pointer dereference in paddle.cropPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-52311 | Command injection in _wget_downloadPublic exploitPaddlePaddle · PaddlePaddle | Critical9.6 |
| CVE-2023-52310 | Command injection in get_online_pass_intervalPublic exploitPaddlePaddle · PaddlePaddle | Critical9.6 |
| CVE-2023-52309 | Heap buffer overflow in paddle.repeat_interleavePaddlePaddle · PaddlePaddle | High8.2 |
| CVE-2023-52308 | FPE in paddle.aminPublic exploitPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-52307 | Stack overflow in paddle.linalg.lu_unpackPublic exploitPaddlePaddle · PaddlePaddle | High8.2 |
| CVE-2023-52306 | FPE in paddle.lerpPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-52305 | FPE in paddle.topkPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-52304 | Stack overflow in paddle.searchsortedPublic exploitPaddlePaddle · PaddlePaddle | High8.2 |
| CVE-2023-52303 | Segfault in paddle.put_along_axisPublic exploitPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-52302 | Segfault in paddle.nextafterPublic exploitPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-38678 | Segfault in paddle.modePaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-38677 | FPE in paddle.linalg.eigPublic exploitPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-38676 | Segfault in paddle.dotPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-38675 | FPE in paddle.linalg.matrix_rankPublic exploitPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-38674 | FPE in paddle.nanmedianPublic exploitPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-38673 | Command injection in fs.pyPublic exploitPaddlePaddle · PaddlePaddle | Critical9.6 |
| CVE-2023-38672 | FPE in paddle.linalg.matrix_powerPublic exploitPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-38671 | Heap buffer overflow in paddle.tracePublic exploitPaddlePaddle · PaddlePaddle | High8.3 |
| CVE-2023-38670 | Null pointer dereference in paddle.flipPaddlePaddle · PaddlePaddle | Medium4.7 |
| CVE-2023-38669 | Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.Public exploitPaddlePaddle · PaddlePaddle | High8.3 |
| CVE-2022-46742 | Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.PaddlePaddle · PaddlePaddle | Critical10.0 |
| CVE-2022-46741 | Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.Public exploitPaddlePaddle · PaddlePaddle | High7.1 |