Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-107055 CVE-2026-107055 - Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to HIGH 7.5 Unknown 1 Details
CVE-2026-107053 CVE-2026-107053 - Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write a INFORMATIONAL - Unknown 1 Details
CVE-2026-107052 CVE-2026-107052 - Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attack HIGH 7.5 Unknown 1 Details
CVE-2026-107051 CVE-2026-107051 - Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arb INFORMATIONAL - Unknown 1 Details
CVE-2026-107050 CVE-2026-107050 - An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in the INFORMATIONAL - Unknown 1 Details
CVE-2026-107049 CVE-2026-107049 - An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supply HIGH 7.5 Unknown 1 Details
CVE-2026-107048 CVE-2026-107048 - An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute INFORMATIONAL - Unknown 1 Details
CVE-2026-107047 CVE-2026-107047 - Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the ap HIGH 7.5 Unknown 1 Details
CVE-2026-107046 CVE-2026-107046 - A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows att INFORMATIONAL - Unknown 1 Details
CVE-2026-107045 CVE-2026-107045 - Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized atta INFORMATIONAL - Unknown 1 Details
CVE-2026-107044 CVE-2026-107044 - Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily mani HIGH 7.5 Unknown 1 Details
CVE-2026-107043 CVE-2026-107043 - Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SM INFORMATIONAL - Unknown 1 Details
CVE-2025-12523 CVE-2025-12523 - Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user MEDIUM 6.5 Unknown 1 Details
CVE-2023-7357 CVE-2023-7357 - A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vul INFORMATIONAL - Unknown 1 Details
CVE-2026-118764 CVE-2026-118764 - minimatch: minimatch: Denial of Service via crafted glob pattern expansion HIGH 7.5 Red Hatminimatch minimatch Unknown 3 sources Details
CVE-2026-118664 GHSA-qr28-fpjm-wq7f - decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs HIGH - decode-uri-componentRed Hat decode-uri-component Unknown 3 sources Details
- GHSA-vpp8-g58w-m8mp - Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset HIGH 7.5 Twisted Twisted Unknown 1 Details
CVE-2026-118662 GHSA-8g5g-mxqh-grgj - Vite: `server.fs.deny` bypassed with queries MEDIUM - vite vite Unknown 2 sources Details
CVE-2026-63414 GHSA-6j52-38f8-qhxr - Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps HIGH - shopify_app shopify_app Unknown 2 sources Details
CVE-2026-62290 GHSA-8rvj-mm4h-c258 - cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials HIGH 7.3 github github.com/cert-manager/cert-manager Unknown 1 Details