Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119367 CVE-2026-119367 - Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting MEDIUM 5.4 Unknown 1 Details
CVE-2026-119365 CVE-2026-119365 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Pla MEDIUM 6.5 Unknown 1 Details
CVE-2026-119300 CVE-2026-119300 - Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users. MEDIUM 6.5 Unknown 1 Details
CVE-2026-119299 CVE-2026-119299 - gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes a MEDIUM 5.9 Red Hat Unknown 2 sources Details
CVE-2026-119298 CVE-2026-119298 - croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the rec MEDIUM 4.2 Unknown 1 Details
CVE-2026-119148 CVE-2026-119148 - Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS MEDIUM 6.5 aws Unknown 1 Details
CVE-2026-119116 CVE-2026-119116 - A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS HIGH 7.8 aws Unknown 1 Details
CVE-2026-112816 CVE-2026-112816 - Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11 INFORMATIONAL - Unknown 1 Details
CVE-2026-104623 CVE-2026-104623 - A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE R MEDIUM 6.3 Unknown 1 Details
CVE-2025-49602 CVE-2025-49602 - An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having INFORMATIONAL - Unknown 1 Details
CVE-2026-62141 CVE-2026-62141 - Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured MEDIUM 5.4 Unknown 1 Details
CVE-2026-119722 CVE-2026-119722 - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skip HIGH 7.8 Unknown 1 Details
CVE-2026-119721 CVE-2026-119721 - Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in r MEDIUM 6.1 Unknown 1 Details
CVE-2026-119720 CVE-2026-119720 - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that read MEDIUM 5.5 Unknown 1 Details
CVE-2026-119719 CVE-2026-119719 - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail ext HIGH 7.8 Unknown 1 Details
CVE-2026-119718 CVE-2026-119718 - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in p HIGH 7.8 Unknown 1 Details
CVE-2026-119717 CVE-2026-119717 - pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute P HIGH 8.1 Unknown 1 Details
CVE-2026-119716 CVE-2026-119716 - pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to exe HIGH 8.1 Unknown 1 Details
CVE-2026-119715 CVE-2026-119715 - NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interfac MEDIUM 4.3 Unknown 1 Details
CVE-2026-119714 CVE-2026-119714 - My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticate MEDIUM 6.5 wordpress Unknown 1 Details