Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119729 CVE-2026-119729 - A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows MEDIUM 6.5 Unknown 1 Details
CVE-2026-119728 CVE-2026-119728 - A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with MEDIUM 5.5 Unknown 1 Details
CVE-2026-119727 CVE-2026-119727 - A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream con MEDIUM 6.5 Unknown 1 Details
CVE-2026-119526 CVE-2026-119526 - Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Roy CRITICAL 9.8 Unknown 1 Details
CVE-2026-119117 CVE-2026-119117 - Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the li MEDIUM 6.5 aws Unknown 1 Details
CVE-2026-118090 CVE-2026-118090 - Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118089 CVE-2026-118089 - Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118086 CVE-2026-118086 - Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116862 CVE-2026-116862 - Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-116861 CVE-2026-116861 - Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-116854 CVE-2026-116854 - Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-116853 CVE-2026-116853 - Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-116852 CVE-2026-116852 - Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. CRITICAL 9.1 Unknown 1 Details
CVE-2026-116851 CVE-2026-116851 - Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-116847 CVE-2026-116847 - Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-116410 CVE-2026-116410 - Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-116405 CVE-2026-116405 - Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-116401 CVE-2026-116401 - Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-116386 CVE-2026-116386 - Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. CRITICAL 9.8 Unknown 1 Details
CVE-2026-115947 CVE-2026-115947 - Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions. MEDIUM 6.5 Unknown 1 Details