synced 1 MIN AGO
01 Search console

The CVE corpus, on scope in milliseconds.

419,094 records · updated every 15 minutes

02 Telemetry

Total CVEs419,094
New today132
Known-exploited (KEV)1,767
Sync lag39 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-1185137.7High—7.7HighSymfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063)sensiolabs symfony9 MIN AGO
CVE-2026-1074791.7Low—1.7LowInteger truncation vulnerability in QTextCodec conversion functions impacts Qt Frameworkqt qt19 MIN AGO
CVE-2026-1194687.1High—7.1HighWordPress Noptin plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerabilitynoptin newsletter team noptin20 MIN AGO
CVE-2026-1194819.8Critical—9.8CriticalWordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerabilitycrocoblock jetformbuilder20 MIN AGO
CVE-2026-655559.8Critical—9.8CriticalWordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerabilityuncanny owl uncanny toolkit for learndash20 MIN AGO
CVE-2026-1219256.6Medium—6.6MediumBuffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driversnowflake snowflake libsnowflakeclient snowflake snowflake php pdo driver1 HR AGO
CVE-2026-1047998.8High—8.8HighMobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parametersrnlab mobile builder1 HR AGO
CVE-2026-973977.2High—7.2HighRemove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffereasywpstuff remove google fonts – disable, block, or replace with bunny fonts for gdpr compliance1 HR AGO
CVE-2026-1144566.5Medium—6.5MediumMissing origin validation for the externalbrowser authenticator callback in multiple Snowflake client driverssnowflake snowflake connector for .net snowflake snowflake connector for python snowflake snowflake go driver snowflake snowflake jdbc driver snowflake snowflake jdbc driver (fips) snowflake snowflake jdbc driver (thin) snowflake snowflake libsnowflakeclient snowflake snowflake node.js driver snowflake snowflake odbc driver snowflake snowflake php pdo driver1 HR AGO
CVE-2026-592675.8Medium—5.8MediumApache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruptionapache software foundation apache openoffice1 HR AGO
CVE-2026-90632—Unrated——UnratedApache OpenOffice: Local file inclusion via GStreamer pluginapache software foundation apache openoffice1 HR AGO
CVE-2026-90634—Unrated——UnratedApache OpenOffice: Out-of-bounds write when importing encrypted PDF filesapache software foundation apache openoffice1 HR AGO
CVE-2026-90631—Unrated——UnratedApache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variablesapache software foundation apache openoffice1 HR AGO
CVE-2026-90629—Unrated——UnratedApache OpenOffice: Out of bounds memory access during WMF importapache software foundation apache openoffice1 HR AGO
CVE-2026-90628—Unrated——UnratedApache OpenOffice: Stack overflow in CFF hint handlingapache software foundation apache openoffice1 HR AGO

05 Recently added to KEV

KEVCVE-2026-119977wordpress foundation wordpressAdded 2026-11-03
KEVCVE-2026-118527ivanti connect secureAdded 2026-10-30
KEVCVE-2026-111357ivanti connect secureAdded 2026-10-30
KEVCVE-2026-97229gitlab gitlabAdded 2026-10-29
KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29
KEVCVE-2026-46300linux linuxAdded 2026-10-28