Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,586All CVEsplus 19,172 rejected
- 65Last 24 hours4,783 in the last 7 days
- 16,378Last 30 days1,441 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 4 | 1 | 0 | 6 | 25 |
| 2025 | 0 | 0 | 1 | 0 | 0 | 1 | 19 |
| 2024 | 0 | 0 | 2 | 1 | 0 | 3 | 18 |
| 2023 | 1 | 2 | 9 | 3 | 0 | 15 | 15 |
| Title | ||
|---|---|---|
| CVE-2026-108568 | InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticityPublic exploitInstantSoft · icms2 | Medium5.3 |
| CVE-2026-108567 | InstantSoft icms2 Image image.php files_delete_file path traversalPublic exploitInstantSoft · icms2 | Medium5.3 |
| CVE-2026-108566 | InstantSoft icms2 Private Message index.tpl.php index cross site scriptingPublic exploitInstantSoft · icms2 | Medium5.1 |
| CVE-2026-48707 | InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanningPublic exploitinstantsoft · icms2 | Low3.1 |
| CVE-2026-54611 | InstantCMS has Remote Code Execution in package installerPublic exploitinstantsoft · icms2 | Medium5.5 |
| CVE-2026-28281 | InstantCMS has Multiple CSRF Vulnerabilitiesinstantsoft · icms2 | High7.1 |
| CVE-2025-59055 | InstantCMS vulnerable to Server-Side Request Forgery via package installerPublic exploitinstantsoft · icms2 | Medium4.7 |
| CVE-2024-50348 | InstantCMS has a Cross Site Scripting VulnerabilityPublic exploitinstantsoft · icms2 | Medium5.4 |
| CVE-2024-31213 | InstantCMS Open Redirect vulnerabilityPublic exploitinstantsoft · icms2 | Low3.5 |
| CVE-2024-31212 | SQL injection in index_chart_data actionPublic exploitinstantsoft · icms2 | Medium6.7 |
| CVE-2023-4928 | SQL Injection in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | High7.2 |
| CVE-2023-4879 | Cross-site Scripting (XSS) - Stored in instantsoft/icms2instantsoft · instantsoft/icms2 | Low3.5 |
| CVE-2023-4878 | Server-Side Request Forgery (SSRF) in instantsoft/icms2instantsoft · instantsoft/icms2 | Medium4.3 |
| CVE-2023-4704 | External Control of System or Configuration Setting in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | High8.8 |
| CVE-2023-4654 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Low2.6 |
| CVE-2023-4655 | Cross-site Scripting (XSS) - Reflected in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Medium4.3 |
| CVE-2023-4650 | Improper Access Control in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Medium4.7 |
| CVE-2023-4649 | Session Fixation in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Medium4.3 |
| CVE-2023-4651 | Server-Side Request Forgery (SSRF) in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Medium6.4 |
| CVE-2023-4653 | Cross-site Scripting (XSS) - Stored in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Medium5.9 |
| CVE-2023-4652 | Cross-site Scripting (XSS) - Stored in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Medium6.8 |
| CVE-2023-4381 | Unverified Password Change in instantsoft/icms2instantsoft · instantsoft/icms2 | Medium4.3 |
| CVE-2023-4189 | Cross-site Scripting (XSS) - Reflected in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Medium4.8 |
| CVE-2023-4188 | SQL Injection in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Critical9.8 |
| CVE-2023-4187 | Cross-site Scripting (XSS) - Stored in instantsoft/icms2Public exploitinstantsoft · instantsoft/icms2 | Low3.5 |