Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,518All CVEsplus 19,144 rejected
- 394Last 24 hours3,249 in the last 7 days
- 16,978Last 30 days1,508 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 259 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 259 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 259 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 259 |
| 2022 | 0 | 28 | 129 | 75 | 0 | 232 | 259 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 27 |
| 2020 | 1 | 1 | 0 | 0 | 0 | 2 | 27 |
| 2019 | 0 | 0 | 2 | 0 | 0 | 2 | 25 |
| 2018 | 1 | 7 | 14 | 1 | 0 | 23 | 23 |
| Title | ||
|---|---|---|
| CVE-2022-4642 | tatoeba2 Profile Name cross site scriptingPublic exploitunspecified · tatoeba2 | Low3.5 |
| CVE-2022-4641 | pig-vector LogisticRegression.java LogisticRegression temp fileunspecified · pig-vector | Low2.5 |
| CVE-2022-4639 | sslh Packet Dumping probe.c hexdump format stringunspecified · sslh | Medium5.6 |
| CVE-2022-4638 | collective.contact.widget widgets.py title cross site scriptingunspecified · collective.contact.widget | Low3.5 |
| CVE-2022-4631 | WP-Ban ban-options.php cross site scriptingunspecified · WP-Ban | Low3.5 |
| CVE-2021-4273 | studygolang search.go Search cross site scriptingunspecified · studygolang | Medium4.3 |
| CVE-2021-4272 | studygolang topics.js cross site scriptingunspecified · studygolang | Low3.5 |
| CVE-2021-4270 | Imprint CMS ViewHelpers.cs SearchForm cross site scriptingunspecified · Imprint CMS | Low3.5 |
| CVE-2021-4269 | SimpleRisk common.js checkAndSetValidation cross site scriptingunspecified · SimpleRisk | Low3.5 |
| CVE-2021-4268 | phpRedisAdmin cross-site request forgeryunspecified · phpRedisAdmin | Medium4.3 |
| CVE-2021-4267 | tad_discuss cross site scriptingunspecified · tad_discuss | Low3.5 |
| CVE-2021-4265 | siwapp-ror cross site scriptingunspecified · siwapp-ror | Low3.5 |
| CVE-2020-36623 | Pengu index.js runApp cross-site request forgeryunspecified · Pengu | Medium4.3 |
| CVE-2021-4262 | laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injectionunspecified · laravel-jqgrid | Medium5.5 |
| CVE-2021-4261 | pacman-canvas db-handler.php addHighscore sql injectionunspecified · pacman-canvas | Medium6.3 |
| CVE-2021-4260 | oils-js Web.js redirectunspecified · oils-js | Medium6.3 |
| CVE-2021-4258 | whohas Package Information cleartext transmissionunspecified · whohas | Low3.7 |
| CVE-2020-36619 | multimon-ng demod_flex.c add_ch format stringunspecified · multimon-ng | Medium5.5 |
| CVE-2022-4603 | ppp pppdump pppdump.c dumpppp array indexunspecified · ppp | Medium4.3 |
| CVE-2022-4596 | Shoplazza Add Blog Post cross site scriptingPublic exploitunspecified · Shoplazza | Low3.5 |
| CVE-2022-4595 | django-openipam exposed_hosts.html cross site scriptingunspecified · django-openipam | Low3.5 |
| CVE-2022-4593 | retra-system cross site scriptingunspecified · retra-system | Low3.5 |
| CVE-2021-4252 | WP-Ban ban-options.php toggle_checkbox cross site scriptingunspecified · WP-Ban | Low3.5 |
| CVE-2021-4251 | as include.cdn.php getFullURL cross site scriptingunspecified · as | Low3.5 |
| CVE-2021-4249 | xml-conduit DOCTYPE Entity Expansion Parse.hs infinite loopunspecified · xml-conduit | Medium4.3 |
| CVE-2022-4583 | jLEMS JUtil.java unpackJar path traversalPublic exploitunspecified · jLEMS | Medium6.3 |
| CVE-2022-4582 | starter-public-edition-4 cross site scriptingunspecified · starter-public-edition-4 | Low3.5 |
| CVE-2022-4572 | UBI Reader UBIFS File output.py ubireader_extract_files path traversalunspecified · UBI Reader | Medium5.4 |
| CVE-2022-4561 | SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scriptingunspecified · SemanticDrilldown Extension | Low3.5 |
| CVE-2022-4526 | django-photologue Default Template photo_detail.html cross site scriptingunspecified · django-photologue | Low3.5 |
| CVE-2022-4523 | vexim2 cross site scriptingunspecified · vexim2 | Low3.5 |
| CVE-2022-4522 | CalendarXP cross site scriptingunspecified · CalendarXP | Low3.5 |
| CVE-2022-4493 | scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversalunspecified · scifio | Medium6.3 |
| CVE-2022-4456 | falling-fruit cross site scriptingunspecified · falling-fruit | Low3.5 |
| CVE-2019-25078 | pacparser pacparser.c pacparser_find_proxy buffer overflowunspecified · pacparser | Medium5.3 |
| CVE-2021-4244 | yikes-inc-easy-mailchimp-extender Plugin add_field_to_form.php cross site scriptingunspecified · yikes-inc-easy-mailchimp-extender Plugin | Low2.6 |
| CVE-2022-4377 | S-CMS Contact Information Page cross site scriptingunspecified · S-CMS | Low3.5 |
| CVE-2022-4322 | maku-boot Scheduled Task AbstractScheduleJob.java doExecute injectionPublic exploitunspecified · maku-boot | Medium6.3 |
| CVE-2022-4300 | FastCMS Template edit injectionPublic exploitunspecified · FastCMS | Medium6.3 |
| CVE-2022-4282 | SpringBootCMS Template Management injectionPublic exploitunspecified · SpringBootCMS | Medium4.7 |
| CVE-2022-4281 | Facepay camera.php authorizationunspecified · Facepay | Medium6.3 |
| CVE-2022-4276 | House Rental System POST Request tenant-engine.php unrestricted uploadPublic exploitunspecified · House Rental System | Medium6.3 |
| CVE-2022-4275 | House Rental System POST Request search-property.php sql injectionPublic exploitunspecified · House Rental System | Medium6.3 |
| CVE-2022-4274 | House Rental System view-property.php sql injectionPublic exploitunspecified · House Rental System | Medium6.3 |
| CVE-2022-4251 | Movie Ticket Booking System editBooking.php cross site scriptingPublic exploitunspecified · Movie Ticket Booking System | Low2.4 |
| CVE-2022-4250 | Movie Ticket Booking System booking.php cross site scriptingPublic exploitunspecified · Movie Ticket Booking System | Low3.5 |
| CVE-2022-4249 | Movie Ticket Booking System POST Request cross site scriptingPublic exploitunspecified · Movie Ticket Booking System | Low3.5 |
| CVE-2022-4248 | Movie Ticket Booking System editBooking.php sql injectionPublic exploitunspecified · Movie Ticket Booking System | Medium5.0 |
| CVE-2022-4247 | Movie Ticket Booking System booking.php sql injectionPublic exploitunspecified · Movie Ticket Booking System | Medium6.3 |
| CVE-2022-4202 | GPAC lsr_dec.c lsr_translate_coords integer overflowPublic exploitunspecified · GPAC | Medium6.3 |