Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,584All CVEsplus 19,166 rejected
- 578Last 24 hours4,947 in the last 7 days
- 18,648Last 30 days1,582 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 35 | 30 | 0 | 0 | 70 | 82 |
| 2025 | 1 | 5 | 4 | 1 | 0 | 11 | 12 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-116828 | YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operandPublic exploitYesWiki · yeswiki | Medium6.9 |
| CVE-2026-116827 | YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Bazar CSV ImportPublic exploitYesWiki · yeswiki | High8.2 |
| CVE-2026-116826 | YesWiki before 4.7.0 Authenticated SSRF via Page Duplication API downloadFileYesWiki · yeswiki | High8.2 |
| CVE-2026-116825 | YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub InboxPublic exploitYesWiki · yeswiki | High8.3 |
| CVE-2026-116824 | YesWiki before 4.7.0 Stored XSS via Referer Header in referrers_sites HandlerPublic exploitYesWiki · yeswiki | Medium5.3 |
| CVE-2026-116823 | YesWiki before 4.7.0 Reflected XSS via BazarField $_REQUEST FallbackPublic exploitYesWiki · yeswiki | Medium5.3 |
| CVE-2026-116822 | YesWiki before 4.7.0 Template Traversal via BazarListeAction template ParameterYesWiki · yeswiki | Medium6.9 |
| CVE-2026-116821 | YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wildcards in UsernamesPublic exploitYesWiki · yeswiki | High7.1 |
| CVE-2026-116820 | YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure via showreq ParameterPublic exploitYesWiki · yeswiki | Medium6.9 |
| CVE-2026-116211 | YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry createPublic exploitYesWiki · yeswiki | High8.8 |
| CVE-2026-116208 | YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPostsPublic exploitYesWiki · yeswiki | High7.2 |
| CVE-2026-116207 | YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search APIYesWiki · yeswiki | High8.8 |
| CVE-2026-116206 | YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML SyntaxPublic exploitYesWiki · yeswiki | Medium5.3 |
| CVE-2026-116205 | YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion SyntaxPublic exploitYesWiki · yeswiki | Medium6.9 |
| CVE-2026-116204 | YesWiki before 4.7.0 CSRF via despam Admin ActionPublic exploitYesWiki · yeswiki | High7.2 |
| CVE-2026-116203 | YesWiki before 4.7.0 Stored XSS via filtertags Action ParametersYesWiki · yeswiki | Medium5.3 |
| CVE-2026-116202 | YesWiki before 4.7.0 Stored XSS via ImageField SVG UploadPublic exploitYesWiki · yeswiki | Medium5.1 |
| CVE-2026-105224 | YesWiki before 4.6.7 Stored XSS via Bazar valeur ActionPublic exploitYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104473 | YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpagesPublic exploitYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104472 | YesWiki before 4.6.7 Missing Authorization via Attachment Download HandlerPublic exploitYesWiki · yeswiki | High8.7 |
| CVE-2026-104471 | YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV ImportPublic exploitYesWiki · yeswiki | High8.6 |
| CVE-2026-104470 | YesWiki before 4.6.7 SSRF via Bazar valeur Action url ParameterPublic exploitYesWiki · yeswiki | Medium5.3 |
| CVE-2026-104469 | YesWiki before 4.6.7 Session Fixation via Login in AuthController.phpPublic exploitYesWiki · yeswiki | High7.6 |
| CVE-2026-104468 | YesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordActionPublic exploitYesWiki · yeswiki | Medium6.3 |
| CVE-2026-104467 | YesWiki before 4.6.7 Authorization Bypass via Public API ModePublic exploitYesWiki · yeswiki | Critical9.2 |
| CVE-2026-104466 | YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src AttributePublic exploitYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104465 | YesWiki before 4.6.7 Reflected XSS via field Parameter in mail HandlerPublic exploitYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104464 | YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameterPublic exploitYesWiki · yeswiki | High8.8 |
| CVE-2026-104463 | YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub InboxPublic exploitYesWiki · yeswiki | High8.3 |
| CVE-2026-104462 | YesWiki before 4.6.7 SQL Injection via nuagetag tags parameterPublic exploitYesWiki · yeswiki | High8.8 |
| CVE-2026-104461 | YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Upload in Bazar FileFieldPublic exploitYesWiki · yeswiki | Medium5.1 |
| CVE-2026-104460 | YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearchPublic exploitYesWiki · yeswiki | High8.7 |
| CVE-2026-104459 | YesWiki before 4.6.7 SSRF via ActivityPub WebFinger actor_handlePublic exploitYesWiki · yeswiki | Medium6.9 |
| CVE-2026-104458 | YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition AddressesPublic exploitYesWiki · yeswiki | High8.3 |
| CVE-2026-104457 | YesWiki before 4.6.7 SQL Injection via filtertags filterN parameterPublic exploitYesWiki · yeswiki | High8.8 |
| CVE-2026-104456 | YesWiki before 4.6.7 Second-Order SQL Injection via ACL UsernamePublic exploitYesWiki · yeswiki | High7.2 |
| CVE-2026-104455 | YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS ActionPublic exploitYesWiki · yeswiki | Medium6.9 |
| CVE-2026-104454 | YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview EndpointPublic exploitYesWiki · yeswiki | Medium6.9 |
| CVE-2026-104453 | YesWiki before 4.6.7 CSRF Tag Deletion via admintag ActionYesWiki · yeswiki | Medium5.3 |
| CVE-2026-104452 | YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager HandlerYesWiki · yeswiki | Medium5.3 |
| CVE-2026-104451 | YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandlerPublic exploitYesWiki · yeswiki | Medium5.3 |
| CVE-2026-104450 | YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage ActionPublic exploitYesWiki · yeswiki | High8.2 |
| CVE-2026-104449 | YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fichePublic exploitYesWiki · yeswiki | High8.3 |
| CVE-2026-104448 | YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage HandlerPublic exploitYesWiki · yeswiki | High7.2 |
| CVE-2026-104447 | YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateActionPublic exploitYesWiki · yeswiki | High7.1 |
| CVE-2026-104446 | YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail HandlerPublic exploitYesWiki · yeswiki | Medium6.9 |
| CVE-2026-104445 | YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor SpoofingYesWiki · yeswiki | High8.8 |
| CVE-2026-104444 | YesWiki before 4.6.7 Authorization Bypass via Comments API editCommentYesWiki · yeswiki | High7.1 |
| CVE-2026-104443 | YesWiki before 4.6.7 Scope Bypass via Triples Delete APIPublic exploitYesWiki · yeswiki | High7.2 |
| CVE-2026-104442 | YesWiki before 4.6.7 Unauthenticated SSRF via syndication ActionPublic exploitYesWiki · yeswiki | Medium6.9 |