Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119722 CVE-2026-119722 - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skip HIGH 7.8 Unknown 1 Details
CVE-2026-119721 CVE-2026-119721 - Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in r MEDIUM 6.1 Unknown 1 Details
CVE-2026-119720 CVE-2026-119720 - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that read MEDIUM 5.5 Unknown 1 Details
CVE-2026-119719 CVE-2026-119719 - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail ext HIGH 7.8 Unknown 1 Details
CVE-2026-119718 CVE-2026-119718 - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in p HIGH 7.8 Unknown 1 Details
CVE-2026-119717 CVE-2026-119717 - pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute P HIGH 8.1 Unknown 1 Details
CVE-2026-119716 CVE-2026-119716 - pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to exe HIGH 8.1 Unknown 1 Details
CVE-2026-119715 CVE-2026-119715 - NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interfac MEDIUM 4.3 Unknown 1 Details
CVE-2026-119714 CVE-2026-119714 - My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticate MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-119713 CVE-2026-119713 - Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders HIGH 8.8 Unknown 1 Details
CVE-2026-119712 CVE-2026-119712 - PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows MEDIUM 6.4 Unknown 1 Details
CVE-2026-119711 CVE-2026-119711 - PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers MEDIUM 5.3 Unknown 1 Details
CVE-2026-119710 CVE-2026-119710 - PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only th HIGH 7.1 Unknown 1 Details
CVE-2026-119709 CVE-2026-119709 - Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata P MEDIUM 5.8 Unknown 1 Details
CVE-2026-119708 CVE-2026-119708 - abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-name MEDIUM 6.5 Unknown 1 Details
CVE-2026-119707 CVE-2026-119707 - SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write rout HIGH 7.1 Unknown 1 Details
CVE-2026-119706 CVE-2026-119706 - InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remot CRITICAL 9.8 Unknown 1 Details
CVE-2026-119705 CVE-2026-119705 - SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthen MEDIUM 5.3 Unknown 1 Details
CVE-2026-119704 CVE-2026-119704 - Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allow MEDIUM 6.8 Unknown 1 Details
CVE-2026-119703 CVE-2026-119703 - xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that MEDIUM 4.8 Unknown 1 Details