Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119288 CVE-2026-119288 - Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Win HIGH 7.0 Unknown 1 Details
CVE-2026-119287 CVE-2026-119287 - Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode HIGH 8.0 Unknown 1 Details
CVE-2026-118238 CVE-2026-118238 - The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due HIGH 7.2 Unknown 1 Details
CVE-2026-117184 CVE-2026-117184 - An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a craft INFORMATIONAL - Unknown 1 Details
CVE-2026-117183 CVE-2026-117183 - A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the INFORMATIONAL - Unknown 1 Details
CVE-2026-117182 CVE-2026-117182 - An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 all INFORMATIONAL - Unknown 1 Details
CVE-2026-116407 CVE-2026-116407 - Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Conf MEDIUM 5.4 Unknown 1 Details
CVE-2026-105456 CVE-2026-105456 - RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link tha INFORMATIONAL - Unknown 1 Details
CVE-2026-105455 CVE-2026-105455 - RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an inciden INFORMATIONAL - Unknown 1 Details
CVE-2026-105454 CVE-2026-105454 - RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A INFORMATIONAL - Unknown 1 Details
CVE-2026-104615 CVE-2026-104615 - A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12 HIGH 7.9 Unknown 1 Details
CVE-2026-104067 CVE-2026-104067 - Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify HIGH 7.8 Unknown 1 Details
CVE-2026-104066 CVE-2026-104066 - Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when u HIGH 7.8 Unknown 1 Details
CVE-2026-104065 CVE-2026-104065 - Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an HIGH 7.8 Unknown 1 Details
CVE-2026-104064 CVE-2026-104064 - Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows atta HIGH 7.8 Unknown 1 Details
CVE-2026-104063 CVE-2026-104063 - Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when de MEDIUM 6.1 Unknown 1 Details
CVE-2026-104062 CVE-2026-104062 - Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allow HIGH 7.8 Unknown 1 Details
CVE-2026-104061 CVE-2026-104061 - Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses unche HIGH 7.8 Unknown 1 Details
CVE-2026-93327 CVE-2026-93327 - A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versio INFORMATIONAL - google Unknown 1 Details
CVE-2026-65444 CVE-2026-65444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes Bl MEDIUM 6.5 Unknown 1 Details