Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-66281 - In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condi
Source ↗
CVE-2026-66281 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
INFORMATIONAL
CVE-2026-66279 - In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass aut
Source ↗
CVE-2026-66279 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
MEDIUM
CVE-2026-115411 - crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivate
Source ↗
CVE-2026-115411 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
MEDIUM
CVE-2026-115400 - crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access
Source ↗
CVE-2026-115400 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
google
MEDIUM
CVE-2026-115249 - A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Im
Source ↗
CVE-2026-115249 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
MEDIUM
CVE-2026-115248 - A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a
Source ↗
CVE-2026-115248 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
MEDIUM
CVE-2026-115247 - A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07
Source ↗
CVE-2026-115247 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
HIGH
CVE-2026-113582 - UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an attacker to
Source ↗
CVE-2026-113582 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
apache
INFORMATIONAL
CVE-2026-107079 - An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parame
Source ↗
CVE-2026-107079 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T14:17
HIGH
CVE-2026-111497 - brotli: Out-of-Bounds Write in Google Brotli Decoder
Source ↗
CVE-2026-111497 ·
Red Hat - CVE Feed · published 2026-10-22T13:35
· correlated from 2 sources
Red Hatgoogle
HIGH
CVE-2026-92709 - rsyslog: rsyslog: Path traversal via unsanitized dynaFile templates
Source ↗
CVE-2026-92709 ·
Red Hat - CVE Feed · published 2026-10-22T13:32
· correlated from 2 sources
Red Hat
LOW
CVE-2026-115246 - A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2
Source ↗
CVE-2026-115246 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T13:17
INFORMATIONAL
CVE-2026-102785 - Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s pu
Source ↗
CVE-2026-102785 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T13:17
CRITICAL
GHSA-7587-9684-52r6 - mem0ai Databricks vector store vulnerable to SQL injection
Source ↗
CVE-2026-115324 ·
GitHub Security Advisories · published 2026-10-22T12:31
· correlated from 2 sources
mem0ai
MEDIUM
CVE-2026-115221 - ipa: freeIPA: FreeIPA uses subject CN as proof of certificate ownership
Source ↗
CVE-2026-115221 ·
Red Hat - CVE Feed · published 2026-10-22T12:00
· correlated from 2 sources
Red Hat
MEDIUM
CVE-2026-13411 - Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allo
Source ↗
CVE-2026-13411 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T11:17
MEDIUM
CVE-2026-115334 - Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authe
Source ↗
CVE-2026-115334 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T11:17
MEDIUM
CVE-2026-115333 - Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validat
Source ↗
CVE-2026-115333 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T11:17
HIGH
CVE-2026-115332 - Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL
Source ↗
CVE-2026-115332 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T11:17
HIGH
CVE-2026-115331 - Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL
Source ↗
CVE-2026-115331 ·
NIST NVD - National Vulnerability Database · published 2026-10-22T11:17