Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-61671 CVE-2026-61671 - WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched version 3.8.7, the `/controle HIGH 8.1 Unknown 1 Details
CVE-2026-61654 CVE-2026-61654 - Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook INFORMATIONAL - Unknown 1 Details
CVE-2026-61645 CVE-2026-61645 - Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vul CRITICAL 9.1 Unknown 1 Details
CVE-2026-45049 CVE-2026-45049 - Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`C HIGH 8.3 Unknown 1 Details
CVE-2026-119317 CVE-2026-119317 - On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the MEDIUM 6.5 linux Unknown 1 Details
CVE-2026-115943 CVE-2026-115943 - Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in Exce INFORMATIONAL - Unknown 1 Details
CVE-2026-119286 CVE-2026-119286 - graphql-core: graphql-core: Denial of Service via unbounded memory growth during document validation HIGH 7.5 Red Hatgraphql-core graphql-core Unknown 3 sources Details
CVE-2026-119284 CVE-2026-119284 - joserfc: joserfc: Denial of Service via excessive memory allocation during JWS deserialization MEDIUM 5.3 Red Hatjoserfc joserfc Unknown 3 sources Details
CVE-2026-61576 CVE-2026-61576 - Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook INFORMATIONAL - Unknown 1 Details
CVE-2026-13303 CVE-2026-13303 - HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store HIGH 8.7 Unknown 1 Details
CVE-2026-119325 CVE-2026-119325 - Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_po HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-119278 CVE-2026-119278 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3 MEDIUM 5.9 Unknown 1 Details
CVE-2026-119277 CVE-2026-119277 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3 MEDIUM 5.9 Unknown 1 Details
CVE-2026-119283 CVE-2026-119283 - joserfc: joserfc: Denial of Service via unbounded recipient processing during JWE decryption HIGH 7.5 Red Hatjoserfc joserfc Unknown 3 sources Details
CVE-2026-119280 CVE-2026-119280 - org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Denial of Service via unvalidated lengths during XA recovery LOW 3.7 Red Hatorg.mariadb.jdbc:mariadb-java-client org.mariadb.jdbc:mariadb-java-client Unknown 3 sources Details
CVE-2026-119209 CVE-2026-119209 - pypdf: pypdf: Denial of Service via crafted cross-reference streams HIGH 5.5 Red Hatpypdf pypdf Unknown 3 sources Details
CVE-2026-119208 CVE-2026-119208 - pypdf: pypdf: Denial of Service via forged page count in encrypted PDFs HIGH 5.5 Red Hatpypdf pypdf Unknown 3 sources Details
CVE-2026-119207 CVE-2026-119207 - pypdf: pypdf: Denial of Service via crafted invalid PDF dictionary HIGH 5.5 Red Hatpypdf pypdf Unknown 3 sources Details
CVE-2026-119206 CVE-2026-119206 - pypdf: pypdf: Denial of Service via crafted PDF page labels HIGH 5.5 Red Hatpypdf pypdf Unknown 3 sources Details
CVE-2026-119205 CVE-2026-119205 - pypdf: pypdf: Denial of Service via infinite loop during dictionary cloning HIGH 5.5 Red Hatpypdf pypdf Unknown 3 sources Details