01 Search console
The CVE corpus, on scope in milliseconds.
419,094 records · updated every 15 minutes
02 Telemetry
Total CVEs419,094
New today132
Known-exploited (KEV)1,767
Sync lag39 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-1185137.7High—Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063)sensiolabs symfony9 MIN AGO
CVE-2026-1074791.7Low—Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Frameworkqt qt19 MIN AGO
CVE-2026-1194687.1High—WordPress Noptin plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerabilitynoptin newsletter team noptin20 MIN AGO
CVE-2026-1194819.8Critical—WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerabilitycrocoblock jetformbuilder20 MIN AGO
CVE-2026-655559.8Critical—WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerabilityuncanny owl uncanny toolkit for learndash20 MIN AGO
CVE-2026-1219256.6Medium—Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driversnowflake snowflake libsnowflakeclient snowflake snowflake php pdo driver1 HR AGO
CVE-2026-1047998.8High—Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parametersrnlab mobile builder1 HR AGO
CVE-2026-973977.2High—Remove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffereasywpstuff remove google fonts – disable, block, or replace with bunny fonts for gdpr compliance1 HR AGO
CVE-2026-1144566.5Medium—Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client driverssnowflake snowflake connector for .net snowflake snowflake connector for python snowflake snowflake go driver snowflake snowflake jdbc driver snowflake snowflake jdbc driver (fips) snowflake snowflake jdbc driver (thin) snowflake snowflake libsnowflakeclient snowflake snowflake node.js driver snowflake snowflake odbc driver snowflake snowflake php pdo driver1 HR AGO
CVE-2026-592675.8Medium—Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruptionapache software foundation apache openoffice1 HR AGO
CVE-2026-90632—Unrated—Apache OpenOffice: Local file inclusion via GStreamer pluginapache software foundation apache openoffice1 HR AGO
CVE-2026-90634—Unrated—Apache OpenOffice: Out-of-bounds write when importing encrypted PDF filesapache software foundation apache openoffice1 HR AGO
CVE-2026-90631—Unrated—Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variablesapache software foundation apache openoffice1 HR AGO
CVE-2026-90629—Unrated—Apache OpenOffice: Out of bounds memory access during WMF importapache software foundation apache openoffice1 HR AGO
CVE-2026-90628—Unrated—Apache OpenOffice: Stack overflow in CFF hint handlingapache software foundation apache openoffice1 HR AGO
05 Recently added to KEV
KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29