Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119569 CVE-2026-119569 - Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-co MEDIUM 5.3 Unknown 1 Details
CVE-2026-119528 CVE-2026-119528 - A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying HIGH 7.8 Unknown 1 Details
CVE-2026-118987 CVE-2026-118987 - CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cook INFORMATIONAL - Unknown 1 Details
CVE-2026-118986 CVE-2026-118986 - CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). Th INFORMATIONAL - Unknown 1 Details
CVE-2026-117350 CVE-2026-117350 - Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. INFORMATIONAL - Unknown 1 Details
CVE-2026-117028 CVE-2026-117028 - Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::che INFORMATIONAL - Unknown 1 Details
CVE-2026-115683 CVE-2026-115683 - A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany regist MEDIUM 6.8 Unknown 1 Details
CVE-2026-112348 CVE-2026-112348 - Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-112347 CVE-2026-112347 - Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API HIGH 7.6 wordpress Unknown 1 Details
CVE-2026-111500 CVE-2026-111500 - Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerabili MEDIUM 5.4 Unknown 1 Details
CVE-2026-111499 CVE-2026-111499 - Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource v MEDIUM 5.5 Unknown 1 Details
CVE-2026-111498 CVE-2026-111498 - OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged a MEDIUM 4.7 Unknown 1 Details
CVE-2026-100355 CVE-2026-100355 - Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the ser LOW 3.1 Unknown 1 Details
CVE-2026-91917 CVE-2026-91917 - Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileg HIGH 8.0 Unknown 1 Details
CVE-2026-87768 CVE-2026-87768 - DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_l INFORMATIONAL - Unknown 1 Details
CVE-2026-75882 CVE-2026-75882 - An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with s INFORMATIONAL - Unknown 1 Details
CVE-2026-64860 CVE-2026-64860 - Rejected reason: Further research determined the issue is not a vulnerability. MEDIUM - Red Hat Unknown 2 sources Details
CVE-2026-13576 CVE-2026-13576 - CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed wit INFORMATIONAL - Unknown 1 Details
CVE-2026-119038 CVE-2026-119038 - Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a INFORMATIONAL - Unknown 1 Details
CVE-2026-119037 CVE-2026-119037 - Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or e INFORMATIONAL - Unknown 1 Details