Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-62250 CVE-2026-62250 - LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `decode_pre MEDIUM 5.5 Unknown 1 Details
CVE-2026-59993 CVE-2026-59993 - Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affecte MEDIUM 6.5 Unknown 1 Details
CVE-2026-58412 CVE-2026-58412 - Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the uplo HIGH 8.2 Unknown 1 Details
CVE-2026-54610 CVE-2026-54610 - LibreDWG is a free C library to read and write DWG files. Prior to 0.14, `bit_TV_to_utf8()` in `src/bits.c` can write to LOW 3.3 Unknown 1 Details
CVE-2026-40573 CVE-2026-40573 - NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` in HIGH 8.6 Unknown 1 Details
CVE-2026-119343 CVE-2026-119343 - Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST MEDIUM 6.8 Unknown 1 Details
CVE-2026-119342 CVE-2026-119342 - Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.1 MEDIUM 5.3 oracleapache Unknown 1 Details
CVE-2026-117666 CVE-2026-117666 - Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary INFORMATIONAL - Unknown 1 Details
CVE-2026-117645 CVE-2026-117645 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework p INFORMATIONAL - Unknown 1 Details
CVE-2026-16760 CVE-2026-16760 - fickling: fickling: Arbitrary code execution via safety check bypass HIGH 7.8 Red Hat Unknown 2 sources Details
CVE-2026-119341 CVE-2026-119341 - tesseract: tesseract: Denial of service via crafted template files MEDIUM 4.7 Red Hat Unknown 2 sources Details
- GHSA-5xjx-3w67-w9x9 - pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI CRITICAL - pypa pypa/gh-action-pypi-publish Unknown 1 Details
CVE-2026-119340 CVE-2026-119340 - tesseract: tesseract: Denial of Service via crafted traineddata file MEDIUM 5.5 Red Hat Unknown 2 sources Details
CVE-2026-95673 CVE-2026-95673 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a INFORMATIONAL - Unknown 1 Details
CVE-2026-78403 CVE-2026-78403 - Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Ove CRITICAL 9.8 Unknown 1 Details
CVE-2026-78402 CVE-2026-78402 - Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overf HIGH 7.8 Unknown 1 Details
CVE-2026-62337 CVE-2026-62337 - SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points INFORMATIONAL - Unknown 1 Details
CVE-2026-62335 CVE-2026-62335 - OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin INFORMATIONAL - Unknown 1 Details
CVE-2026-62334 CVE-2026-62334 - OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin INFORMATIONAL - Unknown 1 Details
CVE-2026-62333 CVE-2026-62333 - OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin INFORMATIONAL - Unknown 1 Details