Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119647 CVE-2026-119647 - RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept t MEDIUM 4.3 Unknown 1 Details
CVE-2026-119646 CVE-2026-119646 - Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other s MEDIUM 4.3 Unknown 1 Details
CVE-2026-119645 CVE-2026-119645 - ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated us MEDIUM 6.5 Unknown 1 Details
CVE-2026-119644 CVE-2026-119644 - Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to mo MEDIUM 5.4 Unknown 1 Details
CVE-2026-119482 CVE-2026-119482 - Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured MEDIUM 5.3 Unknown 1 Details
CVE-2026-119370 CVE-2026-119370 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell MEDIUM 6.5 Unknown 1 Details
CVE-2026-119368 CVE-2026-119368 - Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting MEDIUM 5.3 Unknown 1 Details
CVE-2026-117349 CVE-2026-117349 - Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. INFORMATIONAL - Unknown 1 Details
CVE-2026-117346 CVE-2026-117346 - Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit INFORMATIONAL - Unknown 1 Details
CVE-2026-116860 CVE-2026-116860 - Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Contr MEDIUM 5.3 Unknown 1 Details
CVE-2026-112905 CVE-2026-112905 - Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version CRITICAL 9.0 Unknown 1 Details
CVE-2026-110799 CVE-2026-110799 - Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version CRITICAL 9.8 Unknown 1 Details
CVE-2015-20130 CVE-2015-20130 - Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/repo MEDIUM 6.1 Unknown 1 Details
CVE-2010-20125 CVE-2010-20125 - DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated a HIGH 7.5 Unknown 1 Details
- GHSA-f3fj-9625-rv3m - charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users MEDIUM 5.9 github github.com/charmbracelet/soft-serve Unknown 1 Details
- GHSA-fgxm-5hvv-x4vh - charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories MEDIUM 5.3 github github.com/charmbracelet/soft-serve Unknown 1 Details
CVE-2026-119282 GHSA-qm8w-vx34-5j9j - @nx/maven and @nx/gradle have OS command injection via nx.json plugin options HIGH - @nx @nx/maven@nx/gradle Unknown 2 sources Details
CVE-2026-111487 CVE-2026-111487 - qt: qt: arbitrary code execution via out-of-bounds write in Qt3D assimp plugin HIGH 7.8 Red Hat qt5-main-5.15.18-3.1.hum1 Unknown 2 sources Details
CVE-2026-91915 CVE-2026-91915 - Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output U MEDIUM 6.8 Unknown 1 Details
CVE-2026-91914 CVE-2026-91914 - Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An una HIGH 7.1 Unknown 1 Details