Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 405,484All CVEsplus 19,164 rejected
- 614Last 24 hours4,924 in the last 7 days
- 18,767Last 30 days1,594 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 16 | 8 | 0 | 0 | 24 | 48 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 24 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 23 |
| 2023 | 1 | 1 | 0 | 0 | 0 | 2 | 23 |
| 2022 | 5 | 7 | 3 | 0 | 0 | 15 | 21 |
| 2021 | 0 | 3 | 3 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-84975 | PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)pjsip · pjproject | High7.4 |
| CVE-2026-77396 | PJSIP: Heap buffer overflow in the AVI parserpjsip · pjproject | Medium6.9 |
| CVE-2026-57166 | PJSIP: Pre-authentication overflow in the telnet CLI errorpjsip · pjproject | Medium6.3 |
| CVE-2026-57165 | PJSIP: Pre-authentication overflow in the telnet CLI historypjsip · pjproject | Medium6.3 |
| CVE-2026-57164 | PJSIP: Heap overflow in the HTTP clientpjsip · pjproject | High8.3 |
| CVE-2026-57163 | PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backendpjsip · pjproject | High8.8 |
| CVE-2026-57162 | PJSIP: Stack overflow parsing SDP a=crypto attributespjsip · pjproject | High8.8 |
| CVE-2026-57161 | PJSIP: Stack overflow handling Service-Route headers in a registration responsepjsip · pjproject | High8.8 |
| CVE-2026-57160 | PJSIP: SIP message header buffer overflowpjsip · pjproject | Medium6.9 |
| CVE-2026-57159 | PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenancepjsip · pjproject | High8.4 |
| CVE-2026-42225 | GnuTLS backend silently skips certificate chain verification when verify_peer is falsepjsip · pjproject | High8.2 |
| CVE-2026-41416 | PJSIP: Asymmetric ptime integer overflow in Media Streampjsip · pjproject | High8.1 |
| CVE-2026-41415 | PJSIP: SIP Multipart CID URI Length Underflowpjsip · pjproject | Medium6.7 |
| CVE-2026-40892 | PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()pjsip · pjproject | High8.1 |
| CVE-2026-40614 | PJSIP: Heap buffer overflow in Opus codec decodingpjsip · pjproject | High8.5 |
| CVE-2026-34235 | PJSIP: Heap OOB read in VPX unpacketizerpjsip · pjproject | Medium6.9 |
| CVE-2026-33069 | PJSIP has an Out-of-bounds Read in SIP multipart parsingpjsip · pjproject | Medium6.9 |
| CVE-2026-32945 | PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parserpjsip · pjproject | High8.4 |
| CVE-2026-32942 | PJSIP has ICE session use-after-free race conditionspjsip · pjproject | High8.0 |
| CVE-2026-28799 | PJSIP: Heap use-after-free in PJSIP presence subscription termination handlerpjsip · pjproject | High8.7 |
| CVE-2026-29068 | PJSIP: Stack buffer overflow in Opus codec parserpjsip · pjproject | High8.7 |
| CVE-2026-26967 | PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizerpjsip · pjproject | High8.1 |
| CVE-2026-26203 | PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NALpjsip · pjmedia-video | Medium5.1 |
| CVE-2026-25994 | PJSIP has a heap buffer overflow in ICE with long usernamePublic exploitpjsip · pjproject | High8.1 |
| CVE-2025-65102 | PJSIP is vulnerable to buffer overflow in Opus PLCpjsip · pjproject | High8.7 |
| CVE-2023-38703 | PJSIP has use-after-free vulnerability in SRTP media transportpjsip · pjproject | Critical9.8 |
| CVE-2023-27585 | PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications…pjsip · pjproject | High7.5 |
| CVE-2022-23547 | Heap buffer overflow in pjproject when decoding STUN messagepjsip · pjproject | Medium6.5 |
| CVE-2022-23537 | PJSIP vulnerable to heap buffer overflow when decoding STUN messagepjsip · pjproject | Medium6.5 |
| CVE-2022-39269 | Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsippjsip · pjproject | Critical9.1 |
| CVE-2022-39244 | Buffer overflow in pjlib scanner and pjmediapjsip · pjproject | High7.5 |
| CVE-2022-31031 | Potential stack buffer overflow when parsing message as a STUN clientpjsip · pjproject | Critical9.8 |
| CVE-2022-24792 | Potential infinite loop when parsing WAV format file in PJSIPpjsip · pjproject | High7.5 |
| CVE-2022-24793 | Potential heap buffer overflow when parsing DNS packets in PJSIPpjsip · pjproject | High7.5 |
| CVE-2022-24786 | Potential out-of-bound read/write in PJSIPpjsip · pjproject | Critical9.8 |
| CVE-2022-24763 | Infinite Loop in PJSIPpjsip · pjproject | High7.5 |
| CVE-2022-24764 | Stack buffer overflow in pjprojectpjsip · pjproject | High7.5 |
| CVE-2022-24754 | Buffer overflow in pjsippjsip · pjproject | High8.5 |
| CVE-2022-23608 | Use after free in PJSIPpjsip · pjproject | High8.1 |
| CVE-2022-21723 | Out-of-bounds read in multipart parsing in PJSIPpjsip · pjproject | Critical9.1 |
| CVE-2022-21722 | Potential out-of-bound read during RTP/RTCP parsing in PJSIPpjsip · pjproject | Critical9.1 |
| CVE-2021-41141 | Missing release of locks in PJSIPpjsip · pjproject | Medium5.9 |
| CVE-2021-43845 | Prevent out-of-bounds read in PJSIPpjsip · pjproject | High8.2 |
| CVE-2021-43804 | Out-of-bounds read when parsing RTCP BYE message in PJSIPpjsip · pjproject | High7.3 |
| CVE-2021-37706 | Potential integer underflow upon receiving STUN message in PJSIPpjsip · pjproject | High7.3 |
| CVE-2021-32686 | Denial of Service in PJSIPpjsip · pjproject | Medium5.9 |
| CVE-2021-21375 | Crash in receiving updated SDP answer after initial SDP negotiation failedpjsip · pjproject | Medium6.5 |
| CVE-2020-15260 | Existing TLS connections can be reused without checking remote hostnamepjsip · pjproject | Medium6.8 |