Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,598All CVEsplus 19,172 rejected
  • 77Last 24 hours4,669 in the last 7 days
  • 16,324Last 30 days1,438 of them critical
  • 1,781Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202602000214
202500000012
202400200212
202301000110
20221100029
20210101027
20200130045
20190010011

Latest CVEs

14 CVEs, newest first

CVEs, newest first
Title
CVE-2026-47736
Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustionpuma · puma
High7.5
CVE-2026-47737
Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connectionspuma · puma
High7.5
CVE-2024-45614
Header normalization allows for client to clobber proxy set headers in Pumapuma · puma
Medium5.4
CVE-2024-21647
HTTP Request/Response Smuggling in pumapuma · puma
Medium5.9
CVE-2023-40175
Inconsistent Interpretation of HTTP Requests in pumapuma · puma
High7.3
CVE-2022-24790
HTTP Request Smuggling in pumapuma · puma
Critical9.1
CVE-2022-23634
Information Exposure when using Puma with Railspuma · puma
High8.0
CVE-2021-41136
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in pumapuma · puma
Low3.7
CVE-2021-29509
Keepalive Connections Causing Denial Of Service in pumapuma · puma
High7.5
CVE-2020-11077
HTTP Smuggling via Transfer-Encoding Header in Pumapuma · puma
Medium6.8
CVE-2020-11076
HTTP Smuggling via Transfer-Encoding Header in Pumapuma · puma
High7.5
CVE-2020-5249
HTTP Response Splitting (Early Hints) in Pumapuma · Puma
Medium6.5
CVE-2020-5247
HTTP Response Splitting in Pumapuma · Puma
Medium6.5
CVE-2019-16770
Potential DOS attack in Pumapuma · puma
Medium5.3