Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,901CVE records
2,934Published, last 7 days
1,728In CISA KEV
1,438Critical, last 30 days
5,599Analysed
07:16 UTCLast NVD sync
Filters Show:
25 results. Phpoffice Phpspreadsheet.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-40902 | High | 7.5 |  Phpoffice Phpspreadsheet | Allocation without limits | — | 2 refs | 0.49% | May 12, 2026 |
| CVE-2026-40863 | High | 7.5 | Phpoffice Phpspreadsheet | Allocation without limits | — | 2 refs | 0.49% | May 12, 2026 |
| CVE-2026-40296 | Medium | 5.4 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 2 refs | 0.25% | May 6, 2026 |
| CVE-2026-35453 | Medium | 4.8 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 2 refs | 0.24% | May 5, 2026 |
| CVE-2026-34084 | Critical | 9.2 | Phpoffice Phpspreadsheet | Deserialization of untrusted data | — | 2 refs | 0.78% | May 5, 2026 |
| CVE-2025-22131 | Medium | 5.1 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 1 ref | 0.38% | Jan 20, 2025 |
| CVE-2024-56412 | Medium | 4.8 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 1 ref | 0.38% | Jan 3, 2025 |
| CVE-2024-56411 | Medium | 4.8 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 1 ref | 0.36% | Jan 3, 2025 |
| CVE-2024-56410 | Medium | 4.8 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 2 refs | 0.33% | Jan 3, 2025 |
| CVE-2024-56409 | High | 8.3 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 2 refs | 0.33% | Jan 3, 2025 |
| CVE-2024-56366 | High | 8.3 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 2 refs | 0.33% | Jan 3, 2025 |
| CVE-2024-56365 | High | 8.3 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 2 refs | 0.32% | Jan 3, 2025 |
| CVE-2024-56408 | High | 8.3 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 2 refs | 0.40% | Jan 3, 2025 |
| CVE-2024-48917 | High | 7.5 | Phpoffice Phpspreadsheet | XML external entity (XXE) | — | 1 ref | 0.73% | Nov 18, 2024 |
| CVE-2024-47873 | High | 7.5 | Phpoffice Phpspreadsheet | XML external entity (XXE) | — | 1 ref | 0.74% | Nov 18, 2024 |
| CVE-2024-45291 | High | 8.8 | Phpoffice Phpspreadsheet | CWE-36 | — | 1 ref | 0.86% | Oct 7, 2024 |
| CVE-2024-45290 | High | 7.5 | Phpoffice Phpspreadsheet | CWE-36 | — | 1 ref | 0.63% | Oct 7, 2024 |
| CVE-2024-45060 | Medium | 6.1 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 1 ref | 0.51% | Oct 7, 2024 |
| CVE-2024-45293 | High | 7.5 | Phpoffice Phpspreadsheet | XML external entity (XXE) | — | 1 ref | 2.8% | Oct 7, 2024 |
| CVE-2024-45292 | Medium | 5.4 | Phpoffice Phpspreadsheet | Cross-site scripting | — | 1 ref | 0.34% | Oct 7, 2024 |
