Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,126All CVEsplus 19,141 rejected
- 319Last 24 hours3,325 in the last 7 days
- 16,922Last 30 days1,560 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 12 | 53 | 43 | 1 | 0 | 109 | 147 |
| 2025 | 1 | 11 | 4 | 0 | 0 | 16 | 38 |
| 2024 | 3 | 15 | 4 | 0 | 0 | 22 | 22 |
| Title | ||
|---|---|---|
| CVE-2026-106128 | Prototype Pollution in Progress Software Kendo UI for VueProgress Software · Kendo UI for Vue | Medium4.1 |
| CVE-2026-106127 | Prototype Pollution in Progress Software KendoReactProgress Software · KendoReact | Medium4.1 |
| CVE-2026-106144 | Prototype Pollution in Progress Software Kendo UI for AngularProgress Software · Kendo UI for Angular | Medium4.1 |
| CVE-2026-106143 | Cross-Site Scripting in Progress Software Kendo UI for VueProgress Software · Kendo UI for Vue | Medium5.4 |
| CVE-2026-106142 | Cross-Site Scripting in Progress Software KendoReactProgress Software · KendoReact | Medium5.4 |
| CVE-2026-106141 | Cross-Site Scripting in Progress Software Kendo UI for AngularProgress Software · Kendo UI for Angular | Medium5.4 |
| CVE-2026-106136 | Cross-Site Scripting in Progress Software KendoReactProgress Software · KendoReact | Medium5.4 |
| CVE-2026-106134 | Cross-Site Scripting in Progress Software KendoReactProgress Software · KendoReact | Medium5.4 |
| CVE-2026-106135 | Cross-Site Scripting in Progress Software Kendo UI for AngularProgress Software · Kendo UI for Angular | Medium5.4 |
| CVE-2026-104656 | Cross-site Scripting in Progress Telerik Fiddler EverywhereProgress Software · Progress® Telerik® Fiddler® Everywhere | High7.3 |
| CVE-2026-104657 | Missing Integrity Verification in Progress Software Fiddler Download & Setup SkillProgress Software · Fiddler Download & Setup Skill | High7.5 |
| CVE-2026-90872 | Server-Side Script Injection in Manager Web UI in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium6.6 |
| CVE-2026-90871 | Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium5.3 |
| CVE-2026-90870 | Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium5.3 |
| CVE-2026-90869 | Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP ServerProgress Software · WS_FTP Server | High7.5 |
| CVE-2026-90868 | OS Command Injection in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.9 |
| CVE-2026-90867 | Improper Access Control of Web Admin Console in Progress WS_FTP ServerProgress Software · WS_FTP Server | High8.1 |
| CVE-2026-90866 | Virtual Folder Path Confinement Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90865 | Command Injection via FTP Notification Variables in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.0 |
| CVE-2026-90864 | Host Administrator Path Containment Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90863 | Privilege Escalation via Missing Authorization in WS_FTP ManagerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90862 | Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium4.3 |
| CVE-2026-90861 | Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP ServerProgress Software · WS_FTP Server | Medium6.6 |
| CVE-2026-84296 | SSH Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium6.8 |
| CVE-2026-84295 | Improper Authentication in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical10.0 |
| CVE-2026-84294 | Information Disclosure in Ad Hoc Transfer in Progress WS_FTP ServerProgress Software · WS_FTP Server | High7.7 |
| CVE-2026-118037 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118036 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118035 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118040 | Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118039 | XML External Entity Reference in Telerik Document Processing Libraries SVG Image ProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118038 | Path Traversal in Telerik Document Processing Libraries AI Agent ToolsProgress Software · Telerik Document Processing Libraries | High7.1 |
| CVE-2026-108116 | MDX and SOAP Injection in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | High7.5 |
| CVE-2026-106153 | Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendarProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106151 | Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106150 | Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and TooltipProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106149 | Cross-site Scripting (XSS) in Kendo UI for jQuery MenuProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106148 | Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106147 | Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106161 | Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106160 | Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106159 | Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106158 | Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106157 | Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106162 | Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106163 | Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserProgress Software · Kendo UI for jQuery | Medium6.5 |
| CVE-2026-106139 | Cross-Site Scripting via Chart Tooltip in Kendo UI for VueProgress Software · Kendo UI for Vue | Medium5.4 |
| CVE-2026-106138 | Cross-Site Scripting via Chart Tooltip in KendoReactProgress Software · KendoReact | Medium5.4 |
| CVE-2026-106155 | Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report ViewersProgress Software · Telerik Report Server | High8.9 |
| CVE-2026-106145 | Privilege Escalation in Telerik Report Server Service-Agent HubProgress Software · Telerik Report Server | High7.1 |