Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-96634 GHSA-p96f-p2p2-2g3h - AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE MEDIUM - adminneo-org adminneo-org/adminneo Unknown 1 Details
CVE-2026-96633 GHSA-6vfx-w7q3-42gq - AdminNeo SQLite Database-List Drop Arbitrary File Deletion HIGH 8.1 adminneo-org adminneo-org/adminneo Unknown 1 Details
CVE-2026-96631 GHSA-79wv-8rh2-9vp2 - AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers HIGH 8.2 adminneo-org adminneo-org/adminneo Unknown 1 Details
CVE-2026-96632 GHSA-rx7m-wxwq-vxr9 - AdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass) HIGH - adminneo-org adminneo-org/adminneo Unknown 1 Details
CVE-2026-96630 GHSA-q5mp-gfjf-cf2j - AdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass) HIGH 7.2 adminneo-org adminneo-org/adminneo Unknown 1 Details
CVE-2026-96629 GHSA-wm25-49w3-5qrg - AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery MEDIUM 6.8 adminneo-org adminneo-org/adminneo Unknown 1 Details
CVE-2026-54442 GHSA-c6q7-wqw2-h65w - NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571 MEDIUM 4.8 gov.nsa.emissary:emissaryRed Hat gov.nsa.emissary:emissary Unknown 3 sources Details
CVE-2026-63224 CVE-2026-63224 - OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint export` API constructs `CSV cr INFORMATIONAL - Unknown 1 Details
CVE-2026-63201 CVE-2026-63201 - Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected ver INFORMATIONAL - Unknown 1 Details
CVE-2026-63184 CVE-2026-63184 - Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.1, the `refitter` dotnet to HIGH 7.1 Unknown 1 Details
CVE-2026-63182 CVE-2026-63182 - LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate suppo HIGH 8.1 Unknown 1 Details
CVE-2026-63121 CVE-2026-63121 - Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters. For versions MEDIUM 6.3 Unknown 1 Details
CVE-2026-63115 CVE-2026-63115 - ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the `Undo` handle MEDIUM 5.3 Unknown 1 Details
CVE-2026-62347 CVE-2026-62347 - Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call `S INFORMATIONAL - Unknown 1 Details
CVE-2026-62277 CVE-2026-62277 - LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, `Print MEDIUM 6.5 Unknown 1 Details
CVE-2026-55614 CVE-2026-55614 - uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client.c` lowercases heade INFORMATIONAL - Unknown 1 Details
CVE-2026-55613 CVE-2026-55613 - uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in `ubus.c` can desynchronize HT INFORMATIONAL - Unknown 1 Details
CVE-2026-55612 CVE-2026-55612 - uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an in LOW 3.7 f5 Unknown 1 Details
CVE-2026-55147 CVE-2026-55147 - LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project MEDIUM 6.3 Unknown 1 Details
CVE-2026-55146 CVE-2026-55146 - LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project MEDIUM 4.3 Unknown 1 Details