Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,483All CVEsplus 19,164 rejected
- 614Last 24 hours4,923 in the last 7 days
- 18,768Last 30 days1,594 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 9 | 10 | 0 | 0 | 21 | 36 |
| 2025 | 0 | 1 | 3 | 0 | 0 | 4 | 15 |
| 2024 | 0 | 2 | 3 | 0 | 0 | 5 | 11 |
| 2023 | 0 | 0 | 2 | 0 | 0 | 2 | 6 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2019 | 0 | 0 | 4 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-47156 | MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administratormantisbt · mantisbt | Critical9.3 |
| CVE-2026-42071 | MantisBT: Private Bugnote Attachment Content Leak via REST APImantisbt · mantisbt | High7.2 |
| CVE-2026-42070 | MantisBT: Authorization Bypass in Bugnote Editing via Issue Update APImantisbt · mantisbt | Medium5.3 |
| CVE-2026-44655 | MantisBT: Stored XSS on Move Attachments Admin Pagemantisbt · mantisbt | High8.6 |
| CVE-2026-41897 | MantisBT: Reflected XSS in Rendering Dynamic Custom Textarea Fieldmantisbt · mantisbt | Medium5.3 |
| CVE-2026-44657 | MantisBT: Stored XSS in File Downloadmantisbt · mantisbt | High7.5 |
| CVE-2026-40607 | MantisBT is Vulnerable to Stored XSS Through its Saved-Filter Owner Columnmantisbt · mantisbt | High7.5 |
| CVE-2026-40598 | MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update PagePublic exploitmantisbt · mantisbt | Medium6.9 |
| CVE-2026-40597 | MantisBT has a Content Security Policy bypass via attachmentsmantisbt · mantisbt | High7.6 |
| CVE-2026-40596 | MantisBT is vulnerable to XSS and potential account takeover via user font family preference updatemantisbt · mantisbt | High7.2 |
| CVE-2026-39960 | MantisBT is Vulnerable to Stored XSS through Custom Field Textarea Valuesmantisbt · mantisbt | Medium5.4 |
| CVE-2026-34970 | MantisBT Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is RevokedPublic exploitmantisbt · mantisbt | Medium5.3 |
| CVE-2026-34754 | MantisBT allows unauthorized users to upload attachments to restricted issues via REST APImantisbt · mantisbt | Medium4.3 |
| CVE-2026-34744 | MantisBT authorization bypass allows continued access to self-uploaded attachments on private issuesmantisbt · mantisbt | Medium5.3 |
| CVE-2026-34579 | MantisBT has an authorization bypass via private issue monitoringmantisbt · mantisbt | Medium5.3 |
| CVE-2026-34463 | MantisBT has Stored HTML Injection/XSS via Clone Issue Formmantisbt · mantisbt | High8.6 |
| CVE-2026-34390 | MantisBT: Privilege Escalation from Manager to AdministratorPublic exploitmantisbt · mantisbt | Medium5.1 |
| CVE-2026-33052 | MantisBT: Authorization Bypass in Global Profile CreationPublic exploitmantisbt · mantisbt | Medium5.3 |
| CVE-2026-33548 | MantisBT has Stored HTML Injection / XSS when displaying Tags in Timelinemantisbt · mantisbt | High8.6 |
| CVE-2026-33517 | MantisBT Vulnerable to Stored HTML Injection in Tag Delete Confirmationmantisbt · mantisbt | High8.6 |
| CVE-2026-30849 | MantisBT SOAP API has an authentication bypass vulnerability on MySQLPublic exploitmantisbt · mantisbt | Critical9.3 |
| CVE-2025-62520 | MantisBT unauthorized disclosure of private project column configurationPublic exploitmantisbt · mantisbt | Medium5.3 |
| CVE-2025-55155 | MantisBT: Authentication bypass for some passwords due to PHP type jugglingmantisbt · mantisbt | Medium5.4 |
| CVE-2025-47776 | MantisBT: Authentication bypass for some passwords due to PHP type jugglingmantisbt · mantisbt | High8.8 |
| CVE-2025-46556 | MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Lengthmantisbt · mantisbt | Medium6.5 |
| CVE-2024-45792 | MantisBT vulnerable to information disclosure with user profilesmantisbt · mantisbt | Medium5.3 |
| CVE-2024-34081 | MantisBT Cross-site Scripting vulnerabilitymantisbt · mantisbt | Medium6.6 |
| CVE-2024-34080 | MantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actormantisbt · mantisbt | Medium5.3 |
| CVE-2024-34077 | MantisBT user account takeover in the signup/reset password processmantisbt · mantisbt | High7.3 |
| CVE-2024-23830 | MantisBT Host Header Injection vulnerabilitymantisbt · mantisbt | High8.3 |
| CVE-2023-44394 | Disclosure of project names to unauthorized users in MantisBTmantisbt · mantisbt | Medium4.3 |
| CVE-2023-22476 | MantisBT: Exposure of Private issues' summary to unauthorized usersPublic exploitmantisbt · mantisbt | Medium4.3 |
| CVE-2013-1934 | A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote…mantisBT · mantisBT | Medium5.4 |
| CVE-2013-1932 | A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to…mantisBT · mantisBT | Medium5.4 |
| CVE-2013-1931 | A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting…mantisBT · mantisBT | Medium6.1 |
| CVE-2013-1930 | MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues.mantisBT · mantisBT | Medium4.3 |