CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 13:10 UTC )
This week: 5,479 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,479 Show in the list Critical, last 7 days 360 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product pmmp:pocketmine_mp . Show all products
33 CVEs, showing 1 to 33
CVE Severity Title Published CVE-2023-7332 High 7.1 PocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server Crash Assigned by VulnCheck
Dec 31, 2025 CVE-2020-37277 Medium 6.5 PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction Assigned by VulnCheck
Sep 6, 2026 CVE-2021-48006 Low 3.3 PocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivity Assigned by VulnCheck
Sep 6, 2026 CVE-2021-48007 Medium 6.5 PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket Assigned by VulnCheck
Sep 6, 2026 CVE-2022-51008 Medium 5.3 PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions Assigned by VulnCheck
Sep 6, 2026 CVE-2022-51009 High 7.5 PocketMine-MP before 4.7.2 Denial of Service via Skin Geometry Assigned by VulnCheck
Sep 6, 2026 CVE-2022-51010 Medium 6.5 PocketMine-MP before 4.4.2 Server Crash via Item ID Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51011 Medium 4.3 PocketMine-MP before 4.2.10 Denial of Service via Chat Messages Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51012 Medium 6.5 PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51013 Medium 6.5 PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51014 Medium 6.5 PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51015 Medium 6.5 PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51016 Medium 6.1 PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51017 High 7.5 PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data Assigned by VulnCheck
Sep 7, 2026 CVE-2022-51018 Medium 6.5 PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages Assigned by VulnCheck
Sep 7, 2026 CVE-2023-54355 High 7.5 PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54390 High 7.5 PocketMine-MP before 5.3.1 Denial of Service via LoginPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54392 Medium 6.5 PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54393 High 7.5 PocketMine-MP before 4.20.5 Denial of Service via LoginPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54394 Medium 4.3 PocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54395 Medium 4.3 PocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket Assigned by VulnCheck
Sep 9, 2026 CVE-2023-54396 Medium 6.5 PocketMine-MP before 4.8.1 Server Crash via Banner NBT Assigned by VulnCheck
Sep 9, 2026 CVE-2024-58380 Medium 6.5 PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2024-58381 High 7.5 PocketMine-MP before 5.11.1 Denial of Service via LoginPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2025-71417 Medium 6.5 PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket Assigned by VulnCheck
Sep 9, 2026 CVE-2025-71418 Medium 5.3 PocketMine-MP before 5.25.2 Denial of Service via explode Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86198 Medium 4.2 PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86199 High 7.5 PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86200 Medium 5.3 PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86201 High 7.5 PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86202 Medium 4.3 PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86203 Low 3.7 PocketMine-MP before 5.39.2 Item Duplication via Despawn State Assigned by VulnCheck
Sep 9, 2026 CVE-2026-86204 Medium 6.5 PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket Assigned by VulnCheck
Sep 9, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
