Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119682 CVE-2026-119682 - An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine S INFORMATIONAL - Unknown 1 Details
CVE-2026-119680 CVE-2026-119680 - A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to i INFORMATIONAL - Unknown 1 Details
CVE-2026-119665 CVE-2026-119665 - WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionVi MEDIUM 6.3 Unknown 1 Details
CVE-2026-119664 CVE-2026-119664 - Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsM MEDIUM 4.3 Unknown 1 Details
CVE-2026-119663 CVE-2026-119663 - Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connect MEDIUM 4.3 Unknown 1 Details
CVE-2026-119662 CVE-2026-119662 - Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to au HIGH 8.8 Unknown 1 Details
CVE-2026-119661 CVE-2026-119661 - ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that MEDIUM 4.2 Unknown 1 Details
CVE-2026-119660 CVE-2026-119660 - MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admi CRITICAL 9.8 Unknown 1 Details
CVE-2026-119659 CVE-2026-119659 - Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other us MEDIUM 5.4 Unknown 1 Details
CVE-2026-119658 CVE-2026-119658 - PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role acco MEDIUM 4.3 Unknown 1 Details
CVE-2026-119657 CVE-2026-119657 - FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated MEDIUM 5.0 Unknown 1 Details
CVE-2026-119656 CVE-2026-119656 - CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/GetGoodsPag HIGH 7.5 Unknown 1 Details
CVE-2026-119655 CVE-2026-119655 - CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList endpoint HIGH 7.5 Unknown 1 Details
CVE-2026-119654 CVE-2026-119654 - DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate p HIGH 8.8 Unknown 1 Details
CVE-2026-119653 CVE-2026-119653 - Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list MEDIUM 4.3 Unknown 1 Details
CVE-2026-119652 CVE-2026-119652 - HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that MEDIUM 4.3 Unknown 1 Details
CVE-2026-119651 CVE-2026-119651 - HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allo MEDIUM 5.4 Unknown 1 Details
CVE-2026-119650 CVE-2026-119650 - HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows au MEDIUM 5.4 Unknown 1 Details
CVE-2026-119649 CVE-2026-119649 - Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolder HIGH 7.1 Unknown 1 Details
CVE-2026-119648 CVE-2026-119648 - Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated MEDIUM 4.3 Unknown 1 Details