01 Search console

The CVE corpus, on scope in milliseconds.

412,806 records · updated every 15 minutes

02 Telemetry

Total CVEs412,806

New today494

Known-exploited (KEV)1,754

Sync lag7 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-914039.1Critical—9.1CriticalVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:oracle corporation oracle graalvm enterprise edition oracle corporation oracle graalvm for jdk oracle corporation oracle java se10 MIN AGO

CVE-2026-94423—Unrated——UnratedNet::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts—10 MIN AGO

CVE-2026-94140—Unrated——UnratedRex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no—11 MIN AGO

CVE-2026-1145016.3Medium—6.3MediumPillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1python-pillow pillow16 MIN AGO

CVE-2026-1143815.3Medium—5.3Mediumitsourcecode Online Cake Ordering System orderdetail.php sql injectionitsourcecode online cake ordering system18 MIN AGO

CVE-2026-966399.8Critical—9.8CriticalPillow multi-frame loaders can reuse stale native image storage after mode transitionspython-pillow pillow26 MIN AGO

CVE-2026-966366.5Medium—6.5MediumPillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)python-pillow pillow28 MIN AGO

CVE-2026-290018.6High—8.6HighTastyIgniter 4.4.5 PHP Object Injection via Settings Deserializationtastyigniter tastyigniter30 MIN AGO

CVE-2026-966408.2High—8.2HighPillow PDF append accepts malformed shared page-tree DAG causing resource exhaustionpython-pillow pillow30 MIN AGO

CVE-2026-966377.1High—7.1HighPillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoSpython-pillow pillow32 MIN AGO

CVE-2026-1143805.3Medium—5.3Mediumitsourcecode Online Cake Ordering System inserttrans.php sql injectionitsourcecode online cake ordering system33 MIN AGO

CVE-2026-113811—Unrated——UnratedAlgorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search—34 MIN AGO

CVE-2026-967787.7High—7.7HighPillow: Heap buffer overflow writing JPEG comment after ICC profile fills bufferpython-pillow pillow35 MIN AGO

CVE-2026-1144066.8Medium—6.8MediumCa-certificates: distrust emudhra intermediate ca certificates due to security concernsred hat assisted installer for red hat openshift container platform 2 red hat cert-manager operator for red hat openshift red hat confidential compute attestation red hat kernel module management operator for red hat openshift red hat kube descheduler operator red hat logging subsystem for red hat openshift red hat logical volume manager storage red hat migration toolkit for applications 8 red hat37 MIN AGO

CVE-2026-966437.1High—7.1HighPillow: PNG eXIf chunk makes EXIF parsing run in quadratic timepython-pillow pillow37 MIN AGO

View all 412,806 records

05 Recently added to KEV

KEVCVE-2026-96656plex media serverAdded 2026-10-20

KEVCVE-2026-96655plex media serverAdded 2026-10-20

KEVCVE-2026-96654plex media serverAdded 2026-10-20

KEVCVE-2026-96652plex media serverAdded 2026-10-20

KEVCVE-2026-110936siemens siemens software centerAdded 2026-10-20

KEVCVE-2026-106931eg secure solutions inc. siteguard server edition for apache httpd eg secure solutions inc. siteguard server edition for apache httpd on freebsd eg secure solutions inc. siteguard server edition for iis eg secure solutions inc. siteguard server edition for nginx eg secure solutions inc. siteguard server edition for nginx on freebsdAdded 2026-10-20