Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,133All CVEsplus 19,141 rejected
- 326Last 24 hours3,293 in the last 7 days
- 16,927Last 30 days1,559 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 1 | 2 | 0 | 3 | 15 |
| 2025 | 0 | 0 | 0 | 3 | 0 | 3 | 12 |
| 2024 | 0 | 1 | 0 | 4 | 0 | 5 | 9 |
| 2023 | 0 | 1 | 1 | 1 | 0 | 3 | 4 |
| 2022 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-55866 | SpiceDBChecks involving relations with caveats can result in unconditional permission when conditional permission is expectedauthzed · spicedb | Low3.7 |
| CVE-2026-46668 | SpiceDB: Caveat structures with nested lists can result in improper cache reuseauthzed · spicedb | Low2.3 |
| CVE-2026-40091 | SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logsauthzed · spicedb | Medium6.0 |
| CVE-2025-65111 | SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Resultsauthzed · spicedb | Low2.9 |
| CVE-2025-64529 | SpiceDB's WriteRelationships fails silently if payload is too bigauthzed · spicedb | Low2.7 |
| CVE-2025-49011 | SpiceDB checks involving relations with caveats can result in no permission when permission is expectedPublic exploitauthzed · spicedb | Low3.7 |
| CVE-2024-48909 | SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is notauthzed · spicedb | Low2.0 |
| CVE-2024-46989 | Multiple caveats on resources of the same type can result in no permission when permission is expectedauthzed · spicedb | Low3.7 |
| CVE-2024-38361 | Permissions processing error in spacedbauthzed · spicedb | Low3.7 |
| CVE-2024-32001 | SpiceDB: LookupSubjects may return partial results if a specific kind of relation is usedauthzed · spicedb | Low2.2 |
| CVE-2024-27101 | Integer overflow in chunking helper causes dispatching to miss elements or panicauthzed · spicedb | High7.3 |
| CVE-2023-46255 | `SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsedauthzed · spicedb | Medium4.2 |
| CVE-2023-35930 | LookupResources may return partial results in spicedbauthzed · spicedb | Low3.7 |
| CVE-2023-29193 | SpiceDB binding metrics port to untrusted networks and can leak command-line flagsauthzed · spicedb | High8.7 |
| CVE-2022-21646 | Lookup operations do not take into account wildcards in SpiceDBauthzed · spicedb | High8.1 |