Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,440All CVEsplus 19,159 rejected
- 614Last 24 hours4,891 in the last 7 days
- 18,809Last 30 days1,595 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 2 | 1 | 0 | 0 | 3 | 20 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 17 |
| 2024 | 1 | 2 | 0 | 0 | 0 | 3 | 16 |
| 2023 | 0 | 3 | 1 | 2 | 0 | 6 | 13 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 7 |
| 2021 | 0 | 2 | 5 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-77401 | Zope AccessControl: Information disclosure through Python string `format` and `format_map` functionszopefoundation · AccessControl | Medium6.8 |
| CVE-2026-76825 | RestrictedPython: Sandbox escape via string.Formatter field resolutionzopefoundation · RestrictedPython | High8.4 |
| CVE-2026-55830 | RestrictedPython guard hooks can be shadowed via positional-only argumentsPublic exploitzopefoundation · RestrictedPython | High8.3 |
| CVE-2025-22153 | try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreterzopefoundation · RestrictedPython | High7.9 |
| CVE-2024-51734 | User data deletion by anoynmous users in Zopezopefoundation · AccessControl | High8.7 |
| CVE-2024-47532 | RestrictedPython information leakage via `AttributeError.obj` and the `string` modulezopefoundation · RestrictedPython | High8.7 |
| CVE-2024-24811 | Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query executionzopefoundation · Products.SQLAlchemyDA | Critical9.8 |
| CVE-2023-44389 | Zope management interface vulnerable to stored cross site scripting via the title propertyzopefoundation · Zope | Low3.1 |
| CVE-2023-42458 | Zope vulnerable to Stored Cross Site Scripting with SVG imageszopefoundation · Zope | Low3.7 |
| CVE-2023-41050 | Information disclosure through Python's "format" functionality in Zope AccessControlzopefoundation · AccessControl | Medium6.8 |
| CVE-2023-41039 | Sandbox escape via various forms of "format" in RestrictedPythonzopefoundation · RestrictedPython | High8.3 |
| CVE-2023-37271 | RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escapezopefoundation · RestrictedPython | High8.4 |
| CVE-2023-36814 | zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal modulezopefoundation · Products.CMFCore | High7.5 |
| CVE-2021-32811 | Remote Code Execution via Script (Python) objects under Python 3zopefoundation · Zope | High7.5 |
| CVE-2021-32807 | Remote Code Execution via unsafe classes in otherwise permitted moduleszopefoundation · AccessControl | Medium4.4 |
| CVE-2021-32674 | Remote Code Execution via traversal in TAL expressionszopefoundation · Zope | High8.8 |
| CVE-2021-32633 | Remote Code Execution via traversal in TAL expressionszopefoundation · Zope | Medium6.8 |
| CVE-2021-21360 | Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetupzopefoundation · Products.GenericSetup | Medium5.3 |
| CVE-2021-21337 | URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthServicePublic exploitzopefoundation · Products.PluggableAuthService | Medium5.7 |
| CVE-2021-21336 | Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManagerzopefoundation · Products.PluggableAuthService | Medium6.5 |