Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,790All CVEsplus 19,170 rejected
  • 354Last 24 hours4,896 in the last 7 days
  • 16,910Last 30 days1,491 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260000008
20250000008
20240010018
20231131067
20220010011

Latest CVEs

8 CVEs, newest first

CVEs, newest first
Title
CVE-2024-0226
Stored Cross-Site Scripting in Synopsys SeekerSynopsys · Seeker
Medium4.8
CVE-2023-2158
Impersonation through User-Controlled TokenSynopsys · Code Dx
Critical9.8
CVE-2023-1663
Authenticated Resources Accessible via Forced BrowsingSynopsys · Coverity
Medium6.5
CVE-2023-23850
A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of…Synopsys · Synopsys Jenkins Coverity Plugin
Medium4.3
CVE-2023-23848
Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an…Synopsys · Synopsys Jenkins Coverity Plugin
Medium4.3
CVE-2023-23847
A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified…Synopsys · Synopsys Jenkins Coverity Plugin
Low3.5
CVE-2023-23849
Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability. Any web service hosted on the same sub…Synopsys · Coverity
High8.1
CVE-2022-30278
A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting…Synopsys · Black Duck Hub
Medium6.1