Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-61850 CVE-2026-61850 - Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authori INFORMATIONAL - aws Unknown 1 Details
CVE-2026-61694 CVE-2026-61694 - go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified by LOW 3.7 Unknown 1 Details
CVE-2026-61620 CVE-2026-61620 - HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other a CRITICAL 9.8 Unknown 1 Details
CVE-2026-61618 CVE-2026-61618 - SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without INFORMATIONAL - Unknown 1 Details
CVE-2026-55598 CVE-2026-55598 - PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can CRITICAL 9.1 Unknown 1 Details
CVE-2026-55493 CVE-2026-55493 - HotCRP is conference review software. Starting with 2.101, the `cmt:` search term checks whether a comment is visible to MEDIUM 6.5 Unknown 1 Details
CVE-2026-55098 CVE-2026-55098 - Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the reme MEDIUM 6.5 github github.com/basekick-labs/arc Unknown 2 sources Details
CVE-2026-119730 CVE-2026-119730 - Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers MEDIUM 4.3 Unknown 1 Details
CVE-2026-119337 CVE-2026-119337 - RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/cha HIGH 7.1 Unknown 1 Details
CVE-2026-119336 CVE-2026-119336 - Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From HIGH 7.8 Unknown 1 Details
CVE-2026-119335 CVE-2026-119335 - Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior HIGH 7.8 Unknown 1 Details
CVE-2026-119334 CVE-2026-119334 - Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior LOW 2.2 Unknown 1 Details
CVE-2026-119333 CVE-2026-119333 - draw.io Desktop is the official Electron build of draw.io. Prior to 31.5.2, the Windows application launched powershell HIGH 7.8 Unknown 1 Details
CVE-2026-119332 CVE-2026-119332 - Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cl HIGH 8.8 Unknown 1 Details
CVE-2026-119331 CVE-2026-119331 - Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheet HIGH 7.1 Unknown 1 Details
CVE-2026-119330 CVE-2026-119330 - Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the shared-link creation A LOW 3.5 Unknown 1 Details
CVE-2026-119329 CVE-2026-119329 - Immich is a high-performance self-hosted photo and video management solution. Prior to 3.0.0, GET /api/map/markers used MEDIUM 4.3 Unknown 1 Details
CVE-2026-119328 CVE-2026-119328 - Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the unauthenticated machin MEDIUM 6.5 Unknown 1 Details
CVE-2026-116252 CVE-2026-116252 - pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq tre MEDIUM 6.5 Unknown 1 Details
CVE-2026-116251 CVE-2026-116251 - pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own chang MEDIUM 4.2 Unknown 1 Details