Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,892All CVEsplus 19,117 rejected
- 450Last 24 hours2,944 in the last 7 days
- 16,834Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 12 | 51 | 34 | 1 | 0 | 98 | 136 |
| 2025 | 1 | 11 | 4 | 0 | 0 | 16 | 38 |
| 2024 | 3 | 15 | 4 | 0 | 0 | 22 | 22 |
| Title | ||
|---|---|---|
| CVE-2026-90872 | Server-Side Script Injection in Manager Web UI in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium6.6 |
| CVE-2026-90871 | Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium5.3 |
| CVE-2026-90870 | Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium5.3 |
| CVE-2026-90869 | Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP ServerProgress Software · WS_FTP Server | High7.5 |
| CVE-2026-90868 | OS Command Injection in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.9 |
| CVE-2026-90867 | Improper Access Control of Web Admin Console in Progress WS_FTP ServerProgress Software · WS_FTP Server | High8.1 |
| CVE-2026-90866 | Virtual Folder Path Confinement Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90865 | Command Injection via FTP Notification Variables in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.0 |
| CVE-2026-90864 | Host Administrator Path Containment Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90863 | Privilege Escalation via Missing Authorization in WS_FTP ManagerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90862 | Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium4.3 |
| CVE-2026-90861 | Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP ServerProgress Software · WS_FTP Server | Medium6.6 |
| CVE-2026-84296 | SSH Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium6.8 |
| CVE-2026-84295 | Improper Authentication in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical10.0 |
| CVE-2026-84294 | Information Disclosure in Ad Hoc Transfer in Progress WS_FTP ServerProgress Software · WS_FTP Server | High7.7 |
| CVE-2026-118037 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118036 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118035 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118040 | Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118039 | XML External Entity Reference in Telerik Document Processing Libraries SVG Image ProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118038 | Path Traversal in Telerik Document Processing Libraries AI Agent ToolsProgress Software · Telerik Document Processing Libraries | High7.1 |
| CVE-2026-108116 | MDX and SOAP Injection in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | High7.5 |
| CVE-2026-106153 | Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendarProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106151 | Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106150 | Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and TooltipProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106149 | Cross-site Scripting (XSS) in Kendo UI for jQuery MenuProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106148 | Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106147 | Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106161 | Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106160 | Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106159 | Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106158 | Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106157 | Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106162 | Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106163 | Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserProgress Software · Kendo UI for jQuery | Medium6.5 |
| CVE-2026-106139 | Cross-Site Scripting via Chart Tooltip in Kendo UI for VueProgress Software · Kendo UI for Vue | Medium5.4 |
| CVE-2026-106138 | Cross-Site Scripting via Chart Tooltip in KendoReactProgress Software · KendoReact | Medium5.4 |
| CVE-2026-106155 | Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report ViewersProgress Software · Telerik Report Server | High8.9 |
| CVE-2026-106145 | Privilege Escalation in Telerik Report Server Service-Agent HubProgress Software · Telerik Report Server | High7.1 |
| CVE-2026-106164 | Infinite Loop in Telerik Document Processing XLS ImportProgress Software · Telerik Document Processing Libraries | High7.3 |
| CVE-2026-91140 | OS command injection in Progress Software Autonomous REST Connector GenAI AgentsProgress Software · Autonomous REST Connector GenAI Agents | Critical9.6 |
| CVE-2026-92931 | CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDKProgress Software · @progress/sitefinity-nextjs-sdk | High8.8 |
| CVE-2026-77805 | Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® ClassicProgress Software · Progress® Telerik® Fiddler® Classic | High7.9 |
| CVE-2026-77804 | Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® ClassicProgress Software · Progress® Telerik® Fiddler® Classic | Medium6.6 |
| CVE-2026-77803 | Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® ClassicProgress Software · Progress® Telerik® Fiddler® Classic | Low3.6 |
| CVE-2026-77802 | HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® ClassicProgress Software · Progress® Telerik® Fiddler® Classic | Medium6.3 |
| CVE-2026-86158 | Missing Authentication in the local .NET backend of Progress Telerik Fiddler EverywhereProgress Software · Progress® Telerik® Fiddler® Everywhere | High7.7 |
| CVE-2026-86157 | Exposure of Privileged IPC Functionality in Progress Telerik Fiddler EverywhereProgress Software · Progress® Telerik® Fiddler® Everywhere | Medium5.6 |
| CVE-2026-80462 | Privilege Escalation in Progress Chef AutomateProgress Software · Chef Automate | Critical10.0 |
| CVE-2026-19219 | DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAXProgress Software · Telerik UI for ASP.NET AJAX | High8.1 |