Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-61805 CVE-2026-61805 - Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version INFORMATIONAL - Unknown 1 Details
CVE-2026-61804 CVE-2026-61804 - myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category` HIGH 8.1 Unknown 1 Details
CVE-2026-61803 CVE-2026-61803 - Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version INFORMATIONAL - Unknown 1 Details
CVE-2026-61789 CVE-2026-61789 - DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL INFORMATIONAL - oracle Unknown 1 Details
CVE-2026-55551 CVE-2026-55551 - ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id MEDIUM 6.5 Unknown 1 Details
CVE-2026-50000 CVE-2026-50000 - SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documen MEDIUM 5.0 Unknown 1 Details
CVE-2026-39375 CVE-2026-39375 - Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version INFORMATIONAL - Unknown 1 Details
CVE-2026-37468 CVE-2026-37468 - Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary MEDIUM - Unknown 1 Details
CVE-2026-119466 CVE-2026-119466 - Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Si MEDIUM 5.4 Unknown 1 Details
CVE-2026-119367 CVE-2026-119367 - Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting MEDIUM 5.4 Unknown 1 Details
CVE-2026-119365 CVE-2026-119365 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Pla MEDIUM 6.5 Unknown 1 Details
CVE-2026-119300 CVE-2026-119300 - Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users. MEDIUM 6.5 Unknown 1 Details
CVE-2026-119299 CVE-2026-119299 - gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes a MEDIUM 5.9 Red Hat Unknown 2 sources Details
CVE-2026-119298 CVE-2026-119298 - croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the rec MEDIUM 4.2 Unknown 1 Details
CVE-2026-119148 CVE-2026-119148 - Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS MEDIUM 6.5 aws Unknown 1 Details
CVE-2026-119116 CVE-2026-119116 - A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS HIGH 7.8 aws Unknown 1 Details
CVE-2026-112816 CVE-2026-112816 - Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11 INFORMATIONAL - Unknown 1 Details
CVE-2026-104623 CVE-2026-104623 - A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE R MEDIUM 6.3 Unknown 1 Details
CVE-2025-49602 CVE-2025-49602 - An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having INFORMATIONAL - Unknown 1 Details
CVE-2026-62141 CVE-2026-62141 - Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured MEDIUM 5.4 Unknown 1 Details