Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,630All CVEsplus 19,172 rejected
- 61Last 24 hours4,601 in the last 7 days
- 16,210Last 30 days1,435 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 8 | 15 | 1 | 0 | 27 | 27 |
| Title | ||
|---|---|---|
| CVE-2024-58404 | Zipline 3.4.5 before 3.7.10 Path Traversal via user export endpointdiced · zipline | High8.3 |
| CVE-2024-58405 | Zipline through 3.7.9 Invite Bypass via /api/auth/register Endpointdiced · zipline | High8.8 |
| CVE-2025-71459 | Zipline through 4.3.2 Path Traversal via x-zipline-filename Headerdiced · zipline | High7.2 |
| CVE-2025-71460 | Zipline before 4.2.1 Missing Ownership Check via /api/user/files/transactiondiced · zipline | Low2.3 |
| CVE-2025-71461 | Zipline before 4.0.2 Predictable Filenames via Math.random State Recoverydiced · zipline | Medium6.9 |
| CVE-2025-71462 | Zipline before 3.7.12 XSS via url parameter on login pagediced · zipline | Medium5.1 |
| CVE-2026-126936 | Zipline before 4.7.0 Race Condition in Invite and Quota Limitsdiced · zipline | Medium6.0 |
| CVE-2026-126937 | Zipline before 4.6.5 TOCTOU Race Condition via /api/setupdiced · zipline | Critical9.2 |
| CVE-2026-126938 | Zipline before 4.6.4 Upload Quota Bypass via Forged Content-Range HeadersPublic exploitdiced · zipline | High7.1 |
| CVE-2026-126939 | Zipline before 4.6.4 Unauthenticated File Listing via page Query Parameterdiced · zipline | Medium6.9 |
| CVE-2026-126940 | Zipline before 4.6.4 Rate Limit Bypass via Query String and Headerdiced · zipline | Medium6.9 |
| CVE-2026-126941 | Zipline through 4.6.2 Privilege Escalation via Missing Role Checks on User Endpointsdiced · zipline | High8.2 |
| CVE-2026-126942 | Zipline before 4.6.2 Missing Authorization via POST /api/user/foldersPublic exploitdiced · zipline | Medium5.3 |
| CVE-2026-126943 | Zipline 4.2.0 before 4.6.2 OAuth2 Client Secret Leakage in Startup Logsdiced · zipline | Medium6.9 |
| CVE-2026-126944 | Zipline before 4.6.1 Path Traversal via Imported Filenames in LocalDatasourcediced · zipline | Medium5.8 |
| CVE-2026-126945 | Zipline before 4.5.1 Stored XSS via HighlightCode Componentdiced · zipline | Critical9.3 |
| CVE-2026-126946 | Zipline 4.3.0 before 4.5.0 Stored XSS via SSR Embed Meta TagsPublic exploitdiced · zipline | Medium5.1 |
| CVE-2026-126947 | Zipline before 4.5.0 Stored Open Redirect via POST /api/user/urlsdiced · zipline | Medium5.1 |
| CVE-2026-126948 | Zipline before 4.5.0 IDOR via Folder PATCH and DELETE EndpointsPublic exploitdiced · zipline | High8.7 |
| CVE-2026-126949 | Zipline through 4.4.0 Path Traversal File Overwrite via PATCH /api/user/files/:iddiced · zipline | High7.0 |
| CVE-2026-126950 | Zipline through 4.4.0 Path Traversal Arbitrary File Delete via x-zipline-file-extensiondiced · zipline | High7.0 |
| CVE-2026-126951 | Zipline through 4.4.0 Authenticated Path Traversal via /api/user/files/:id/rawdiced · zipline | Medium6.9 |
| CVE-2026-126952 | Zipline through 4.4.0 WebAuthn Authentication Bypass via Passkey LoginPublic exploitdiced · zipline | Critical9.2 |
| CVE-2026-126935 | Zipline before 4.8.0 maxViews Limit Bypass via Race ConditionPublic exploitdiced · zipline | Medium6.3 |
| CVE-2026-126934 | Zipline 4.3.2 before 4.8.0 Rate Limit Bypass via Spoofed X-Forwarded-Fordiced · zipline | Medium6.9 |
| CVE-2026-126933 | Zipline 4.0.0 before 4.8.0 Disabled Extensions Upload Filter Bypass via Extension Format Mismatchdiced · zipline | Medium5.3 |
| CVE-2026-126932 | Zipline 4.6.2 before 4.8.0 Disabled MIME Type Policy Bypass via File Metadata Updatediced · zipline | Medium5.3 |