Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-61673 - WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in `
NEAR-REAL-TIME
CVE-2026-61673 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
Source ↗
HIGH
CVE-2026-61671 - WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched version 3.8.7, the `/controle
NEAR-REAL-TIME
CVE-2026-61671 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
Source ↗
INFORMATIONAL
CVE-2026-61654 - Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook
NEAR-REAL-TIME
CVE-2026-61654 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
Source ↗
CRITICAL
CVE-2026-61645 - Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vul
NEAR-REAL-TIME
CVE-2026-61645 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
Source ↗
HIGH
CVE-2026-45049 - Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`C
NEAR-REAL-TIME
CVE-2026-45049 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
Source ↗
MEDIUM
CVE-2026-119317 - On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the
NEAR-REAL-TIME
CVE-2026-119317 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
linux
Source ↗
INFORMATIONAL
CVE-2026-115943 - Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in Exce
NEAR-REAL-TIME
CVE-2026-115943 · NIST NVD - National Vulnerability Database · published 2026-10-29T22:17
Source ↗
HIGH
CVE-2026-119286 - graphql-core: graphql-core: Denial of Service via unbounded memory growth during document validation
NEAR-REAL-TIME
CVE-2026-119286 · Red Hat - CVE Feed · published 2026-10-29T21:38 · correlated from 3 sources
Red Hatgraphql-core
Source ↗
MEDIUM
CVE-2026-119284 - joserfc: joserfc: Denial of Service via excessive memory allocation during JWS deserialization
NEAR-REAL-TIME
CVE-2026-119284 · Red Hat - CVE Feed · published 2026-10-29T21:33 · correlated from 3 sources
Red Hatjoserfc
Source ↗
INFORMATIONAL
CVE-2026-61576 - Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook
NEAR-REAL-TIME
CVE-2026-61576 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
Source ↗
HIGH
CVE-2026-13303 - HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store
NEAR-REAL-TIME
CVE-2026-13303 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
Source ↗
HIGH
CVE-2026-119325 - Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_po
NEAR-REAL-TIME
CVE-2026-119325 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
wordpress
Source ↗
MEDIUM
CVE-2026-119278 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3
NEAR-REAL-TIME
CVE-2026-119278 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
Source ↗
MEDIUM
CVE-2026-119277 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3
NEAR-REAL-TIME
CVE-2026-119277 · NIST NVD - National Vulnerability Database · published 2026-10-29T21:17
Source ↗
HIGH
CVE-2026-119283 - joserfc: joserfc: Denial of Service via unbounded recipient processing during JWE decryption
NEAR-REAL-TIME
CVE-2026-119283 · Red Hat - CVE Feed · published 2026-10-29T21:10 · correlated from 3 sources
Red Hatjoserfc
Source ↗
LOW
CVE-2026-119280 - org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Denial of Service via unvalidated lengths during XA recovery
NEAR-REAL-TIME
CVE-2026-119280 · Red Hat - CVE Feed · published 2026-10-29T20:55 · correlated from 3 sources
Red Hatorg.mariadb.jdbc:mariadb-java-client
Source ↗
HIGH
CVE-2026-119209 - pypdf: pypdf: Denial of Service via crafted cross-reference streams
NEAR-REAL-TIME
CVE-2026-119209 · Red Hat - CVE Feed · published 2026-10-29T20:43 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119208 - pypdf: pypdf: Denial of Service via forged page count in encrypted PDFs
NEAR-REAL-TIME
CVE-2026-119208 · Red Hat - CVE Feed · published 2026-10-29T20:41 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119207 - pypdf: pypdf: Denial of Service via crafted invalid PDF dictionary
NEAR-REAL-TIME
CVE-2026-119207 · Red Hat - CVE Feed · published 2026-10-29T20:38 · correlated from 3 sources
Red Hatpypdf
Source ↗
HIGH
CVE-2026-119206 - pypdf: pypdf: Denial of Service via crafted PDF page labels
NEAR-REAL-TIME
CVE-2026-119206 · Red Hat - CVE Feed · published 2026-10-29T20:37 · correlated from 3 sources
Red Hatpypdf
Source ↗