Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-24533 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Bl
NEAR-REAL-TIME
CVE-2026-24533 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-22386 - Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access
NEAR-REAL-TIME
CVE-2026-22386 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-118094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser
NEAR-REAL-TIME
CVE-2026-118094 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-118093 - Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting Incor
NEAR-REAL-TIME
CVE-2026-118093 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-118087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site R
NEAR-REAL-TIME
CVE-2026-118087 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
INFORMATIONAL
CVE-2026-113690 - Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.
NEAR-REAL-TIME
CVE-2026-113690 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
INFORMATIONAL
CVE-2026-113689 - Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.
NEAR-REAL-TIME
CVE-2026-113689 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
INFORMATIONAL
CVE-2026-113688 - Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3
NEAR-REAL-TIME
CVE-2026-113688 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
HIGH
CVE-2019-25781 - markdown: python-markdown: Denial of Service via inefficient inline link parsing
NEAR-REAL-TIME
CVE-2019-25781 · Red Hat - CVE Feed · published 2026-10-29T13:08 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-79656 - grafana: OAuth and OIDC tokens written unredacted to Grafana server logs
NEAR-REAL-TIME
CVE-2026-79656 · Red Hat - CVE Feed · published 2026-10-29T13:02 · correlated from 2 sources
Red Hatgoogle
Source ↗
MEDIUM
CVE-2026-97860 - YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who h
NEAR-REAL-TIME
CVE-2026-97860 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
CRITICAL
CVE-2026-97854 - Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitra
NEAR-REAL-TIME
CVE-2026-97854 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-96767 - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi
NEAR-REAL-TIME
CVE-2026-96767 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
MEDIUM
CVE-2026-92086 - The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including
NEAR-REAL-TIME
CVE-2026-92086 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
INFORMATIONAL
CVE-2026-5702 - Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticat
NEAR-REAL-TIME
CVE-2026-5702 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5700 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5700 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5699 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5699 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5698 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5698 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5697 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5697 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
MEDIUM
CVE-2026-27401 - Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-fo
NEAR-REAL-TIME
CVE-2026-27401 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗