Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-42694 CVE-2026-42694 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allow MEDIUM 4.3 Unknown 1 Details
CVE-2026-42692 CVE-2026-42692 - Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-42690 CVE-2026-42690 - Subscriber Broken Access Control in LearnPress <= 4.4.10 versions. MEDIUM 5.4 Unknown 1 Details
CVE-2026-27394 CVE-2026-27394 - Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-18894 CVE-2026-18894 - IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code MEDIUM 6.5 Unknown 1 Details
CVE-2026-119145 CVE-2026-119145 - Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handl CRITICAL 9.9 Unknown 1 Details
CVE-2026-119144 CVE-2026-119144 - Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because HIGH 8.8 Unknown 1 Details
CVE-2026-119131 CVE-2026-119131 - Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in wasmtime-wasi-http MEDIUM 5.3 Unknown 1 Details
CVE-2026-119130 CVE-2026-119130 - Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path-with-query values LOW 2.6 Unknown 1 Details
CVE-2026-119129 CVE-2026-119129 - ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vulnerability in Login V2 that all HIGH 8.1 Unknown 1 Details
CVE-2026-119128 CVE-2026-119128 - ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticat HIGH 7.4 Unknown 1 Details
CVE-2026-119127 CVE-2026-119127 - ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticate HIGH 8.1 Unknown 1 Details
CVE-2026-119126 CVE-2026-119126 - Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefined values w LOW 3.1 Unknown 1 Details
CVE-2026-119125 CVE-2026-119125 - Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reverted by a beforeSave LOW 3.1 Unknown 1 Details
CVE-2026-119122 CVE-2026-119122 - Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API cl MEDIUM 5.3 Unknown 1 Details
CVE-2026-119121 CVE-2026-119121 - Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows auth MEDIUM 4.3 Unknown 1 Details
CVE-2026-119120 CVE-2026-119120 - Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bod HIGH 7.5 Unknown 1 Details
CVE-2026-119119 CVE-2026-119119 - Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails HIGH 7.5 Unknown 1 Details
CVE-2026-119118 CVE-2026-119118 - Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to interce MEDIUM 6.5 Unknown 1 Details
CVE-2026-118673 CVE-2026-118673 - KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2 INFORMATIONAL - Unknown 1 Details