Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,426All CVEsplus 19,170 rejected
- 774Last 24 hours5,189 in the last 7 days
- 16,939Last 30 days1,482 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 17 | 2 | 1 | 0 | 21 | 56 |
| 2025 | 0 | 5 | 0 | 0 | 0 | 5 | 35 |
| 2024 | 2 | 6 | 3 | 0 | 0 | 11 | 30 |
| 2023 | 1 | 8 | 8 | 2 | 0 | 19 | 19 |
| Title | ||
|---|---|---|
| CVE-2026-75786 | SQL Injection in Grafana Integration Endpoint (query.php)Pandora FMS · Pandora FMS | High7.2 |
| CVE-2026-64950 | Stored Cross-Site Scripting via Directory Name in File Manager Create DirectoryPandora FMS · Pandora FMS | High8.4 |
| CVE-2026-64949 | Unrestricted File Upload Leading to Remote Code Execution in Admin Tools File ManagerPandora FMS · Pandora FMS | High8.6 |
| CVE-2026-64948 | Missing Authorization in get_module_detail AJAX Endpoint Allows Cross-Group Module Data DisclosurePandora FMS · Pandora FMS | High7.1 |
| CVE-2026-64947 | CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File ManagerPandora FMS · Pandora FMS | High7.5 |
| CVE-2026-64946 | CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File ManagerPandora FMS · Pandora FMS | High7.4 |
| CVE-2026-34190 | CSRF in Alert Command DeletionPandora FMS · Pandora FMS | Medium5.9 |
| CVE-2026-34189 | CSRF in Event Response DeletionPandora FMS · Pandora FMS | Medium5.9 |
| CVE-2026-34187 | SQL Injection in Graph Container ParameterPandora FMS · Pandora FMS | High7.6 |
| CVE-2026-30810 | Server-Side Request Forgery in API Checker leads to Privilege EscalationPandora FMS · Pandora FMS | High7.1 |
| CVE-2026-30808 | Session Fixation in Authentication leads to Session HijackingPandora FMS · Pandora FMS | High7.6 |
| CVE-2026-30807 | Cross-Site Request Forgery on Extension PagesPandora FMS · Pandora FMS | High7.1 |
| CVE-2026-30805 | Insecure Default Initialization in API Authentication leads to Authentication BypassPandora FMS · Pandora FMS | Critical9.1 |
| CVE-2026-34188 | OS Command Injection in Event Response ExecutionPandora FMS · Pandora FMS | High7.5 |
| CVE-2026-34186 | SQL Injection in Custom Fields leads to Database CompromisePandora FMS · Pandora FMS | High8.7 |
| CVE-2026-30813 | SQL Injection in Module Search leads to Database CompromisePandora FMS · Pandora FMS | High8.7 |
| CVE-2026-30812 | Stored Cross-Site Scripting in Event Comments via Filter BypassPandora FMS · Pandora FMS | Low2.1 |
| CVE-2026-30811 | Missing Authorization in Configuration Ajax Endpoint leads to Information DisclosurePandora FMS · Pandora FMS | High8.4 |
| CVE-2026-30809 | OS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code ExecutionPandora FMS · Pandora FMS | High8.7 |
| CVE-2026-30806 | OS Command Injection in Network Report leads to Remote Code ExecutionPandora FMS · Pandora FMS | High8.7 |
| CVE-2026-30804 | Unrestricted File Upload in Extension Uploader leads to Remote Code ExecutionPandora FMS · Pandora FMS | High8.6 |
| CVE-2025-5306 | Command Injection in Netflow pathPublic exploitPandora FMS · Pandora FMS | High7.0 |
| CVE-2025-4678 | Remote Code Execution leads to Command InjectionPandora FMS · Pandora ITSM | High7.0 |
| CVE-2025-4653 | Remote Code Execution leads to Command InjectionPublic exploitPandora FMS · Pandora ITSM | High7.0 |
| CVE-2024-12992 | Remote Code Execution leads to Command InjectionPandora FMS · Pandora FMS | High8.6 |
| CVE-2024-12971 | QuickShell Authenticated Command InjectionPublic exploitPandora FMS · Pandora FMS | High8.6 |
| CVE-2024-11320 | Command Injection leading to RCE via LDAP MisconfigurationPublic exploitPandora FMS · Pandora FMS | Medium6.9 |
| CVE-2024-35308 | Post-auth Arbitrary File Read in the Server Plugins SectionPandora FMS · Pandora FMS | High8.3 |
| CVE-2024-9987 | SQL Injection in CSV Module Data CollectionPandora FMS · Pandora FMS | High8.6 |
| CVE-2024-35307 | Argument Injection Leading to Remote Code Execution in Realtime Graph ExtensionPandora FMS · Pandora FMS | Critical9.4 |
| CVE-2024-35306 | OS Command injection in Ajax PHP files through HTTP RequestPandora FMS · Pandora FMS | High8.7 |
| CVE-2024-35305 | Unauth Time-Based SQL Injection via APIPandora FMS · Pandora FMS | High8.9 |
| CVE-2024-35304 | System command injection through Netflow functionPandora FMS · Pandora FMS | Critical9.3 |
| CVE-2023-41793 | Path Traversal and Untrusted Upload FilePandora FMS · Pandora FMS | Medium6.7 |
| CVE-2023-44092 | OS Command InjectionPandora FMS · Pandora FMS | High7.6 |
| CVE-2023-44091 | Unauth Time-Based SQL InjectionPandora FMS · Pandora FMS | High7.5 |
| CVE-2023-44090 | UnautH SQL InjectionPandora FMS · Pandora FMS | Medium6.8 |
| CVE-2023-44089 | XSS in Visual ConsolePandora FMS · Pandora FMS | Medium6.1 |
| CVE-2023-44088 | SQL Injection in Visual ConsolePublic exploitPandora FMS · Pandora FMS | Medium5.9 |
| CVE-2023-41815 | XSS in File managerPandora FMS · Pandora FMS | High7.5 |
| CVE-2023-41814 | XSS Vulnerability MessagesPandora FMS · Pandora FMS | Low3.7 |
| CVE-2023-41813 | User notification settings editionPandora FMS · Pandora FMS | Low3.0 |
| CVE-2023-41812 | Uploading executables via the file managerPandora FMS · Pandora FMS | Medium5.7 |
| CVE-2023-41811 | Stored XSS Via Site News PagePandora FMS · Pandora FMS | Medium5.3 |
| CVE-2023-41810 | Stored XSS Via Dashboard PanelPandora FMS · Pandora FMS | Medium4.0 |
| CVE-2023-41808 | Arbitrary File Read As Root Via GoTTY PagePandora FMS · Pandora FMS | High8.5 |
| CVE-2023-41807 | Linux Local Privilege Escalation Via GoTTY PagePandora FMS · Pandora FMS | Critical9.1 |
| CVE-2023-41806 | Misassignment of privileges can cause DOS attackPandora FMS · Pandora FMS | High8.2 |
| CVE-2023-41792 | Lack of Authorization and Stored XSS Via SNMP Trap Editor PagePandora FMS · Pandora FMS | Medium5.9 |
| CVE-2023-41791 | Lack of Authorization and Stored XSS Via Translation AbusePandora FMS · Pandora FMS | High8.4 |