Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,136All CVEsplus 19,158 rejected
  • 547Last 24 hours4,765 in the last 7 days
  • 18,753Last 30 days1,596 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202600000014
20250014001414

Latest CVEs

14 CVEs, newest first

CVEs, newest first
Title
CVE-2025-1849
zj1983 zz import_data_todb server-side request forgeryPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1848
zj1983 zz import_data_check server-side request forgeryPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1847
zj1983 zz improper authorizationPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1846
zj1983 zz File ZfileAction.java deleteLocalFile denial of servicePublic exploitzj1983 · zz
Medium5.3
CVE-2025-1834
zj1983 zz resolve unrestricted uploadPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1833
zj1983 zz HTTP Request Customer_noticeAction.java sendNotice server-side request forgeryPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1832
zj1983 zz ZroleAction.java getUserList sql injectionPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1831
zj1983 zz ZorgAction.java GetDBUser sql injectionPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1830
zj1983 zz Customer Information cross site scriptingPublic exploitzj1983 · zz
Medium4.8
CVE-2025-1821
zj1983 zz ZorgAction.java getUserOrgForUserId sql injectionPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1820
zj1983 zz ZworkflowAction.java getOaWid sql injectionPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1818
zj1983 zz ZfileAction.upload unrestricted uploadPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1813
zj1983 zz cross-site request forgeryPublic exploitzj1983 · zz
Medium5.3
CVE-2025-1812
zj1983 zz SuperZ.java GetUserOrg sql injectionPublic exploitzj1983 · zz
Medium5.3