Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119036 CVE-2026-119036 - Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before INFORMATIONAL - Unknown 1 Details
CVE-2026-118996 CVE-2026-118996 - CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserC INFORMATIONAL - Unknown 1 Details
CVE-2026-118995 CVE-2026-118995 - CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator. creat INFORMATIONAL - Unknown 1 Details
CVE-2026-118994 CVE-2026-118994 - CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name. login() writes the logi INFORMATIONAL - Unknown 1 Details
CVE-2026-118993 CVE-2026-118993 - CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expre INFORMATIONAL - Unknown 1 Details
CVE-2026-118992 CVE-2026-118992 - CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configur HIGH 8.4 Unknown 1 Details
CVE-2026-118991 CVE-2026-118991 - CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key. getC INFORMATIONAL - Unknown 1 Details
CVE-2026-118990 CVE-2026-118990 - CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when takin INFORMATIONAL - Unknown 1 Details
CVE-2026-118988 CVE-2026-118988 - CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in t INFORMATIONAL - Unknown 1 Details
CVE-2026-116130 CVE-2026-116130 - HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request. The XS INFORMATIONAL - Unknown 1 Details
CVE-2026-116128 CVE-2026-116128 - Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked re INFORMATIONAL - Unknown 1 Details
CVE-2026-116127 CVE-2026-116127 - Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persi INFORMATIONAL - Unknown 1 Details
CVE-2026-115866 CVE-2026-115866 - Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding c INFORMATIONAL - Unknown 1 Details
CVE-2026-115865 CVE-2026-115865 - Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting me INFORMATIONAL - Unknown 1 Details
CVE-2026-112374 CVE-2026-112374 - FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint (POST /ap MEDIUM 4.3 Unknown 1 Details
CVE-2026-111503 CVE-2026-111503 - Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an HIGH 7.1 Unknown 1 Details
CVE-2026-111502 CVE-2026-111502 - Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability. A l MEDIUM 4.3 Unknown 1 Details
CVE-2026-111501 CVE-2026-111501 - Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attemp MEDIUM 5.4 Unknown 1 Details
CVE-2026-119602 CVE-2026-119602 - libmspack: libmspack: Information disclosure via unchecked back-references in MS-ZIP decompressor LOW 3.3 Red Hat Unknown 2 sources Details
CVE-2026-119568 CVE-2026-119568 - vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated at HIGH 7.4 Unknown 1 Details