01 Search console

The CVE corpus, on scope in milliseconds.

420,317 records · updated every 15 minutes

02 Telemetry

Total CVEs420,317

New today308

Known-exploited (KEV)1,768

Sync lag15 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1046567.3High—7.3HighCross-site Scripting in Progress Telerik Fiddler Everywhereprogress software progress® telerik® fiddler® everywhere13 MIN AGO

CVE-2026-1046577.5High—7.5HighMissing Integrity Verification in Progress Software Fiddler Download & Setup Skillprogress software fiddler download & setup skill14 MIN AGO

CVE-2026-1185158.4High—8.4HighSymfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server Filesensiolabs symfony31 MIN AGO

CVE-2026-1238598.1High—8.1HighSQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)snowflake snowflake connector for python snowflake snowflake connector for python (universal core)36 MIN AGO

CVE-2026-1238584.4Medium—4.4MediumIn JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projectsjetbrains phpstorm37 MIN AGO

CVE-2026-1238574.3Medium—4.3MediumIn JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetectionjetbrains phpstorm37 MIN AGO

CVE-2026-1238566.5Medium—6.5MediumIn JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development serverjetbrains toolbox app37 MIN AGO

CVE-2026-1238557.5High—7.5HighIn JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLsjetbrains toolbox app37 MIN AGO

CVE-2026-1238545.5Medium—5.5MediumIn JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget modulejetbrains pycharm37 MIN AGO

CVE-2026-1238537.8High—7.8HighIn JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build processjetbrains intellij idea37 MIN AGO

CVE-2026-1238527.4High—7.4HighIn JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updatesjetbrains junie github action37 MIN AGO

CVE-2026-1238515.4Medium—5.4MediumIn JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded charactersjetbrains junie github action37 MIN AGO

CVE-2026-1238503.5Low—3.5LowIn JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directivesjetbrains youtrack37 MIN AGO

CVE-2026-1238497.0High—7.0HighIn JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchersjetbrains intellij idea37 MIN AGO

CVE-2026-1238487.4High—7.4HighIn JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificatesjetbrains intellij idea37 MIN AGO

View all 420,317 records

05 Recently added to KEV

KEVCVE-2024-27834apple ios and ipados apple macos apple safari apple tvos apple watchosAdded 2026-11-04

KEVCVE-2026-119977wordpress foundation wordpressAdded 2026-11-03

KEVCVE-2026-118527ivanti connect secureAdded 2026-10-30

KEVCVE-2026-111357ivanti connect secureAdded 2026-10-30

KEVCVE-2026-97229gitlab gitlabAdded 2026-10-29

KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29