Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-39735 CVE-2026-39735 - Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access C MEDIUM 6.5 Unknown 1 Details
CVE-2026-24533 CVE-2026-24533 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Bl MEDIUM 6.5 Unknown 1 Details
CVE-2026-22386 CVE-2026-22386 - Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access MEDIUM 4.3 Unknown 1 Details
CVE-2026-118094 CVE-2026-118094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser MEDIUM 6.5 Unknown 1 Details
CVE-2026-118093 CVE-2026-118093 - Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting Incor MEDIUM 5.3 Unknown 1 Details
CVE-2026-118087 CVE-2026-118087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site R MEDIUM 6.5 Unknown 1 Details
CVE-2026-113690 CVE-2026-113690 - Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4. INFORMATIONAL - Unknown 1 Details
CVE-2026-113689 CVE-2026-113689 - Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4. INFORMATIONAL - Unknown 1 Details
CVE-2026-113688 CVE-2026-113688 - Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3 INFORMATIONAL - Unknown 1 Details
CVE-2019-25781 CVE-2019-25781 - markdown: python-markdown: Denial of Service via inefficient inline link parsing HIGH 7.5 Red Hat Unknown 2 sources Details
CVE-2026-79656 CVE-2026-79656 - grafana: OAuth and OIDC tokens written unredacted to Grafana server logs MEDIUM 5.9 Red Hatgoogle grafana13-1-main-13.1.8-0.5.hum1grafana13-2-main-13.2.4-0.4.hum1 Unknown 2 sources Details
CVE-2026-97860 CVE-2026-97860 - YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who h MEDIUM 6.7 Unknown 1 Details
CVE-2026-97854 CVE-2026-97854 - Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitra CRITICAL 9.8 Unknown 1 Details
CVE-2026-96767 CVE-2026-96767 - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-92086 CVE-2026-92086 - The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-5702 CVE-2026-5702 - Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticat INFORMATIONAL - Unknown 1 Details
CVE-2026-5700 CVE-2026-5700 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code INFORMATIONAL - Unknown 1 Details
CVE-2026-5699 CVE-2026-5699 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code INFORMATIONAL - Unknown 1 Details
CVE-2026-5698 CVE-2026-5698 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code INFORMATIONAL - Unknown 1 Details
CVE-2026-5697 CVE-2026-5697 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code INFORMATIONAL - Unknown 1 Details