CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
GNU has 1,150 CVEs, 4 exploited. Pick a weakness or a product to list them.
By weakness
- Memory Corruption580
- Denial of Service109
- File and Path Handling46
- Input Validation and Logic44
- Other weaknesses36
- Access Control34
- Command and Code Injection27 · 4 exploited
- Cryptography19
- Information Disclosure18
- Race Conditions10
- Authentication7
- Cross-site Scripting7
- Injection and Smuggling6
- Cross-Site Request Forgery5
- Supply Chain and Malicious Code3
- Misconfiguration and Insecure Design2
- Deserialization and Object Injection1
- Insecure Direct Object Reference1
- Open Redirect1
- Server-Side Request Forgery1
- No weakness recorded193
By product
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-14.