Security Operations
Threat Intelligence
๐Ÿ”Ž
โ“

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2025-31704 CVE-2025-31704 - A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially craf CRITICAL 9.8 Unknown 1 Details
CVE-2026-119542 CVE-2026-119542 - org.infinispan/infinispan-query: Infinispan: Deeply nested Ickle queries can trigger a StackOverflowError MEDIUM 4.3 Red Hat Unknown 2 sources Details
CVE-2026-14467 CVE-2026-14467 - An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised INFORMATIONAL - Unknown 1 Details
CVE-2026-97209 CVE-2026-97209 - Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another use INFORMATIONAL - Unknown 1 Details
CVE-2026-65874 CVE-2026-65874 - This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) a INFORMATIONAL - apache Unknown 1 Details
CVE-2026-64618 CVE-2026-64618 - Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fine INFORMATIONAL - apache Unknown 1 Details
CVE-2026-59396 CVE-2026-59396 - A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism. When UAA retrieves a MEDIUM 4.9 Unknown 1 Details
CVE-2026-59388 CVE-2026-59388 - Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exp MEDIUM 6.5 Unknown 1 Details
CVE-2026-59387 CVE-2026-59387 - The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ en HIGH 8.8 nginx Unknown 1 Details
CVE-2026-59385 CVE-2026-59385 - A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, en LOW 2.7 Unknown 1 Details
CVE-2026-115274 CVE-2026-115274 - Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an INFORMATIONAL - Unknown 1 Details
CVE-2026-109821 CVE-2026-109821 - Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an a INFORMATIONAL - Unknown 1 Details
CVE-2026-59386 CVE-2026-59386 - capi: capi: Privilege escalation via unauthorized application configuration modification MEDIUM 6.5 Red Hat Unknown 2 sources Details
CVE-2026-82104 CVE-2026-82104 - In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 thr INFORMATIONAL - Unknown 1 Details
CVE-2026-97645 CVE-2026-97645 - The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-90437 CVE-2026-90437 - The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Excerpt / Post Custom Field HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-89435 CVE-2026-89435 - The Formidable Forms โ€“ WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vul HIGH 8.8 wordpress Unknown 1 Details
CVE-2026-118593 CVE-2026-118593 - A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9 MEDIUM 5.9 linux Unknown 1 Details
CVE-2026-116622 CVE-2026-116622 - The Food Store โ€“ Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-110732 CVE-2026-110732 - The AI Engine โ€“ The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorizatio HIGH 7.5 wordpress Unknown 1 Details