01 Search console
The CVE corpus, on scope in milliseconds.
413,863 records · updated every 15 minutes
02 Telemetry
Total CVEs413,863
New today22
Known-exploited (KEV)1,756
Sync lag27 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-1158035.3Medium—Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorizationscada-lts40 MIN AGO
CVE-2026-1158025.3Medium—InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphereinternscience internagent55 MIN AGO
CVE-2026-1080136.8Medium—HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)hcl software bigfix platform1 HR AGO
CVE-2026-114429—Unrated—WP VR 8.5.49 - 9.0.2 - Contributor+ Stored XSS via Hotspot Contentunknown wpvr1 HR AGO
CVE-2026-113674—Unrated—GeoDirectory < 2.8.194 - Unauthenticated Guest-Submitted Listing Modificationunknown geodirectory1 HR AGO
CVE-2026-113673—Unrated—GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Exportunknown geodirectory1 HR AGO
CVE-2026-113493—Unrated—GeoDirectory < 2.8.194 - Contributor+ Stored XSS via gd_map Shortcode width Attributeunknown geodirectory1 HR AGO
CVE-2026-113492—Unrated—GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Actionunknown geodirectory1 HR AGO
CVE-2026-113491—Unrated—GeoDirectory < 2.8.194 - Subscriber+ Media File Disclosure and Deletion via Path Traversalunknown geodirectory1 HR AGO
CVE-2026-113490—Unrated—GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpointunknown geodirectory1 HR AGO
CVE-2026-113489—Unrated—GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDORunknown geodirectory1 HR AGO
CVE-2026-112207—Unrated—Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download Linkunknown download monitor1 HR AGO
CVE-2026-110956—Unrated—asVereinbase < 1.1.8 - Unauthenticated Authentication Bypass via 2FA Validationunknown asvereinbase1 HR AGO
CVE-2026-105199—Unrated—Pixel Tag Manager for WooCommerce < 2.2.3 - Contributor+ Stored XSS via Google Tag Manager Container IDunknown pixel tag manager for woocommerce1 HR AGO
CVE-2026-97353—Unrated—News Kit Addons For Elementor <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update via nekit_update_mega_menu_formunknown news kit addons for elementor1 HR AGO