Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,511All CVEsplus 19,172 rejected
- 784Last 24 hours5,191 in the last 7 days
- 16,913Last 30 days1,484 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 0 | 3 | 0 | 0 | 6 | 12 |
| 2025 | 0 | 2 | 0 | 0 | 0 | 2 | 6 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2023 | 0 | 1 | 0 | 1 | 0 | 2 | 4 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 2 |
| 2021 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-57576 | plone.app.dexterity and plone.app.contenttypes have a Denial of Service due to excessive title or description lengthplone · plone.app.dexterity | Medium6.5 |
| CVE-2026-57149 | plone.app.portlets Vulnerable to Remote Code Execution via TALES Injectionplone · plone.app.portlets | Critical9.9 |
| CVE-2026-54503 | plone.app.textfield: Stored XSS by spoofing mime typeplone · plone.app.textfield | Medium4.3 |
| CVE-2026-55247 | plone.app.event: Denial of service via iCalendar importplone · plone.app.event | Critical9.1 |
| CVE-2026-55248 | plone.app.portlets: Denial of service via RSS feed portletplone · plone.app.portlets | Critical9.1 |
| CVE-2026-28413 | Products.isurlinportal: Possible open redirect when using more than 2 forward slashesplone · Products.isurlinportal | Medium5.3 |
| CVE-2025-61668 | @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous userplone · volto | High8.7 |
| CVE-2025-58047 | Volto affected by possible DoS by invoking specific URL by anonymous userplone · volto | High7.5 |
| CVE-2023-42457 | plone.rest vulnerable to Denial of Service when ++api++ is used many timesplone · plone.rest | High7.5 |
| CVE-2023-41048 | plone.namedfile vulnerable to Stored Cross Site Scripting with SVG imagesplone · plone.namedfile | Low3.7 |
| CVE-2022-24740 | Improper Authentication in Voltoplone · volto | Medium5.0 |
| CVE-2021-32806 | URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportalplone · Products.isurlinportal | Medium6.5 |