Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119119 CVE-2026-119119 - Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails HIGH 7.5 Unknown 1 Details
CVE-2026-119118 CVE-2026-119118 - Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to interce MEDIUM 6.5 Unknown 1 Details
CVE-2026-118673 CVE-2026-118673 - KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2 INFORMATIONAL - Unknown 1 Details
CVE-2026-118085 CVE-2026-118085 - Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-118084 CVE-2026-118084 - Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-118083 CVE-2026-118083 - Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-118082 CVE-2026-118082 - Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118081 CVE-2026-118081 - Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118080 CVE-2026-118080 - Contributor PHP Object Injection in Social Snap <= 1.5.4 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118079 CVE-2026-118079 - Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118078 CVE-2026-118078 - Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118077 CVE-2026-118077 - Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118076 CVE-2026-118076 - Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118075 CVE-2026-118075 - Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118074 CVE-2026-118074 - Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118073 CVE-2026-118073 - Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116869 CVE-2026-116869 - Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-116868 CVE-2026-116868 - Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116867 CVE-2026-116867 - Contributor PHP Object Injection in Dynamic QR Code &#8211; generator <= 1.0.1 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116866 CVE-2026-116866 - Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. HIGH 8.8 Unknown 1 Details