Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-117507 CVE-2026-117507 - A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManag MEDIUM 5.4 Unknown 1 Details
CVE-2026-117506 CVE-2026-117506 - A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificat MEDIUM 4.3 Unknown 1 Details
CVE-2026-117505 CVE-2026-117505 - A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue MEDIUM 4.3 Unknown 1 Details
CVE-2026-105987 CVE-2026-105987 - KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an auth INFORMATIONAL - Unknown 1 Details
- GHSA-4ffr-jq9g-5ffx - Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service MEDIUM 5.9 nodemailer nodemailer Unknown 1 Details
- GHSA-g73g-hqqh-jr95 - Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped MEDIUM 5.3 nodemailer nodemailer Unknown 1 Details
- GHSA-4g23-2xm8-66gc - Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service MEDIUM 5.9 nodemailer nodemailer Unknown 1 Details
- GHSA-j456-xh4h-cpf2 - NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment HIGH 8.6 nltk nltk Unknown 1 Details
- GHSA-q84f-53jg-9ppm - better-auth: Device login approval does not show the requesting client or permissions HIGH 8.1 better-auth better-auth Unknown 1 Details
CVE-2026-94347 CVE-2026-94347 - PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1. HIGH 7.2 Unknown 1 Details
CVE-2026-94346 CVE-2026-94346 - PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1. HIGH 7.2 Unknown 1 Details
CVE-2026-90727 CVE-2026-90727 - Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 LOW 3.8 Unknown 1 Details
CVE-2026-90726 CVE-2026-90726 - Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 MEDIUM 6.0 Unknown 1 Details
CVE-2026-90725 CVE-2026-90725 - Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 MEDIUM 4.9 Unknown 1 Details
CVE-2026-68866 CVE-2026-68866 - PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1 MEDIUM 6.5 Unknown 1 Details
CVE-2026-16307 CVE-2026-16307 - Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessi MEDIUM 4.3 Unknown 1 Details
CVE-2026-12887 CVE-2026-12887 - In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a s INFORMATIONAL - Unknown 1 Details
CVE-2026-118027 CVE-2026-118027 - Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44. INFORMATIONAL - Unknown 1 Details
CVE-2026-118026 CVE-2026-118026 - Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. INFORMATIONAL - Unknown 1 Details
CVE-2026-118025 CVE-2026-118025 - Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. INFORMATIONAL - Unknown 1 Details