Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,666All CVEsplus 19,172 rejected
- 86Last 24 hours4,595 in the last 7 days
- 16,192Last 30 days1,426 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 12 |
| 2025 | 2 | 8 | 2 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2025-53692 | Sitecore Experience Platform Cross-Site Scripting VulnerabilitySitecore · Sitecore Experience Manager (XM) | High7.1 |
| CVE-2025-53690 | Sitecore Products ViewState Deserialization VulnerabilityExploitedPublic exploitSitecore · Experience Manager (XM) | Critical9.0 |
| CVE-2025-53691 | Sitecore Experience Remote Code Execution through Insecure DeserializationPublic exploitSitecore · Experience Manager (XM) | High8.8 |
| CVE-2025-53693 | HTML Cache Poisoning through Unsafe ReflectionsPublic exploitSitecore · Sitecore Experience Manager (XM) | Critical9.8 |
| CVE-2025-53694 | Information Disclosure in ItemServices APIPublic exploitSitecore · Sitecore Experience Manager (XM) | High7.5 |
| CVE-2022-4979 | Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSSSitecore · Experience Platform | Medium5.1 |
| CVE-2015-10142 | Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known PathSitecore · Experience Platform (XP) | Medium6.9 |
| CVE-2025-34139 | Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File ReadSitecore · Experience Manager (XM) | High8.7 |
| CVE-2020-36850 | Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information DisclosureSitecore · JSS React Sample Application | High8.7 |
| CVE-2025-34511 | Sitecore PowerShell Extension RCE via Unrestricted UploadPublic exploitSitecore · Powershell Extension | High8.8 |
| CVE-2025-34510 | Sitecore XM, XC, and XP Post-Auth RCE via Zip SlipPublic exploitSitecore · Experience Manager | High8.8 |
| CVE-2025-34509 | Sitecore XM and XP Hardcoded CredentialsPublic exploitSitecore · Experience Manager | High7.5 |