Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,582All CVEsplus 19,172 rejected
- 129Last 24 hours4,783 in the last 7 days
- 16,501Last 30 days1,453 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 3 | 0 | 0 | 3 | 106 |
| 2025 | 0 | 3 | 95 | 1 | 0 | 99 | 103 |
| 2024 | 0 | 2 | 2 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-4355 | Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2026-2064 | Portabilis i-Educar User Data meusdadod.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2026-2015 | Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9638 | i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panelPublic exploitPortabilis · i-Educar | Medium4.8 |
| CVE-2025-65022 | i-Educar Authenticated Time-based SQL Injection in `agenda.php`Public exploitportabilis · i-educar | High7.2 |
| CVE-2025-65023 | i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`Public exploitportabilis · i-educar | High7.2 |
| CVE-2025-65024 | i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`Public exploitportabilis · i-educar | High7.2 |
| CVE-2025-11554 | Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissionsPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-11050 | Portabilis i-Educar periodo-lancamento improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-11049 | Portabilis i-Educar unificacao-aluno improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-11048 | Portabilis i-Educar consulta-dispensas improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-11047 | Portabilis i-Educar aluno improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10846 | Portabilis i-Educar edit sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10845 | Portabilis i-Educar view sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10844 | Portabilis i-Educar aluno sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10608 | Portabilis i-Educar enrollment-history access controlPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10607 | Portabilis i-Educar diarioApi information disclosurePublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10606 | Portabilis i-Educar ConfiguracaoMovimentoGeral cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10605 | Portabilis i-Educar agenda_preferencias.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10591 | Portabilis i-Educar Editar Função educar_funcao_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-10590 | Portabilis i-Educar educar_usuario_det.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10584 | Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-10373 | Portabilis i-Educar educar_turma_tipo_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-10372 | Portabilis i-Educar educar_modulo_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-10099 | Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium4.8 |
| CVE-2025-10074 | Portabilis i-Educar tipos cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-10073 | Portabilis i-Educar turma improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10072 | Portabilis i-Educar enturmar access controlPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10071 | Portabilis i-Educar cancelar-enturmacao-em-lote access controlPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10070 | Portabilis i-Educar enturmacao-em-lote access controlPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10013 | Portabilis i-Educar exportacao-para-o-seb access controlPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10012 | Portabilis i-Educar educar_historico_escolar_lst.php sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-10011 | Portabilis i-Educar edit sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9760 | Portabilis i-Educar Matricula API matricula improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9738 | Portabilis i-Educar educar_tipo_ensino_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-9724 | Portabilis i-Educar educar_nivel_ensino_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-9723 | Portabilis i-Educar educar_tipo_regime_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-9722 | Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-9721 | Portabilis i-Educar edit cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-9720 | Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-9687 | Portabilis i-Educar processamentoApi improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9686 | Portabilis i-Educar Listagem de áreas de conhecimento edit sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9685 | Portabilis i-Educar Listagem de áreas de conhecimento view sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9684 | Portabilis i-Educar Formula de Cálculo de Média edit sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9653 | Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-9652 | Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scriptingPublic exploitPortabilis · i-Educar | Medium5.1 |
| CVE-2025-9609 | Portabilis i-Educar consulta improper authorizationPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9608 | Portabilis i-Educar Formula de Cálculo de Média view sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9607 | Portabilis i-Educar Tabelas de Arredondamento view sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |
| CVE-2025-9606 | Portabilis i-Educar agenda_preferencias.php sql injectionPublic exploitPortabilis · i-Educar | Medium5.3 |