Skip to content
Noroxi

CVE databaseCVE tracking.What comes first?

We combine CVSS, CISA KEV and EPSS into a single action score. Pick your stack, filter to what affects you, follow it and get notified on change.

410,762 records · last updated Nov 15, 2026

Action score · 0–100

CVSS
40
Technical severity
KEV
30
Exploited in the wild
EPSS
30
30-day probability

80 and above: now · 60–79: this week · 40–59: plan · below 40: monitor

How is it calculated?
Total records
410,762
Actively exploited (KEV)
1,781
Weaponized
4,439
Fix today
489
Last 7 days
4,803
Vulnerability classes Exploited CVEs by month CVE statistics Import scanner output Banner to CVE Bulk lookup Scan SBOM API Open data

Watch your stack · no account needed

What technologies do you use?

Pick them and we’ll filter the live database down to the CVEs that affect you.

Popular picks

All410,762Actively exploited1,781Last 7 days4,803Weaponized4,439N-day window2,170EPSS rising17
Filters
Severity
Exploit status
Attack profile · Tags derived automatically from the CVSS vector, CWE and text; pick several and all must match.
More tags
0

25 of 10,000+ records

  • CVE-2024-3400
    100Now

    PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    paloaltonetworks · pan-osApr 12, 2024

  • CVE-2021-44228
    100Now

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    apache · log4jDec 10, 2021

  • CVE-2019-11510
    100Now

    In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attack

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    ivanti · connect secureMay 8, 2019

  • CVE-2024-1709
    100Now

    Authentication bypass using an alternate path or channel

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    connectwise · screenconnectFeb 21, 2024

  • CVE-2022-24816
    100Now

    Improper Control of Generation of Code in jai-ext

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    geosolutionsgroup · jai-extApr 13, 2022

  • CVE-2026-10520
    100Now

    An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    ivanti · standalone sentryJun 9, 2026

  • CVE-2020-0796
    100Now

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain reque

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    microsoft · windows 10 1903Mar 12, 2020

  • CVE-2025-32432
    100Now

    Craft CMS Allows Remote Code Execution

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    craftcms · craft cmsApr 25, 2025

  • CVE-2023-20198
    100Now

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software.

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    cisco · ios xeOct 16, 2023

  • CVE-2021-22205
    100Now

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9.

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    gitlab · gitlabApr 23, 2021

  • CVE-2025-55182
    100Now

    A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 inclu

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    facebook · reactDec 3, 2025

  • CVE-2024-4040
    100Now

    Unauthenticated arbitrary file read and remote code execution in CrushFTP

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    crushftp · crushftpApr 22, 2024

  • CVE-2015-3306
    100Now

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    proftpd · proftpdMay 18, 2015

  • CVE-2026-75650
    100Now

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    adobe · commerceSep 7, 2026

  • CVE-2022-0543
    100Now

    It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    redis · redisFeb 18, 2022

  • CVE-2025-32433
    100Now

    Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

    CriticalCVSS 10.0KEVWeaponizedEPSS 98%

    erlang · erlang\/otpApr 16, 2025

  • CVE-2020-5902
    99Now

    In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Inte

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    f5 · big-ip access policy managerJul 1, 2020

  • CVE-2025-53770
    99Now

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    microsoft · sharepoint serverJul 19, 2025

  • CVE-2017-5638
    99Now

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    apache · strutsMar 10, 2017

  • CVE-2024-23897
    99Now

    Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character follo

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    jenkins · jenkinsJan 24, 2024

  • CVE-2018-13379
    99Now

    An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    fortinet · fortiproxyJun 4, 2019

  • CVE-2023-27350
    99Now

    This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    papercut · papercut mfApr 20, 2023

  • CVE-2014-6271
    99Now

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    gnu · bashSep 24, 2014

  • CVE-2015-1635
    99Now

    HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote a

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    microsoft · windows 7Apr 14, 2015

  • CVE-2023-1671
    99Now

    A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    sophos · web applianceApr 4, 2023

Have a CVE or analysis to share?

Share detection methods, affected versions, or remediation details. Our team reviews every submission and credits you by name.

Contribute