Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-120251 CVE-2026-120251 - imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows MEDIUM 5.5 Red Hat Unknown 2 sources Details
CVE-2026-120250 CVE-2026-120250 - OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and u MEDIUM 5.3 Unknown 1 Details
CVE-2026-120249 CVE-2026-120249 - Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/ MEDIUM 6.5 Unknown 1 Details
CVE-2026-120248 CVE-2026-120248 - Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administr MEDIUM 4.8 Unknown 1 Details
CVE-2026-120191 CVE-2026-120191 - A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of t HIGH 7.3 Unknown 1 Details
CVE-2026-120190 CVE-2026-120190 - A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functio LOW 3.5 Unknown 1 Details
CVE-2026-120189 CVE-2026-120189 - A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of th CRITICAL 10.0 Unknown 1 Details
CVE-2026-120247 CVE-2026-120247 - ffmpeg: ffmpeg: Information disclosure via uninitialized heap memory in Huffyuv decoder MEDIUM 5.5 Red Hat Unknown 2 sources Details
CVE-2026-120246 CVE-2026-120246 - ffmpeg: ffmpeg: Information disclosure via uninitialized palette entries in CDXL decoder MEDIUM 5.5 Red Hat Unknown 2 sources Details
CVE-2026-120245 CVE-2026-120245 - ffmpeg: ffmpeg: Information disclosure via crafted Sun Raster image MEDIUM 5.5 Red Hat Unknown 2 sources Details
CVE-2026-120244 CVE-2026-120244 - ffmpeg: ffmpeg: Information disclosure via truncated PCX image MEDIUM 5.5 Red Hat Unknown 2 sources Details
CVE-2026-120243 CVE-2026-120243 - ffmpeg: ffmpeg: information disclosure via crafted Go2Meeting stream MEDIUM 5.5 Red Hat Unknown 2 sources Details
CVE-2026-115946 CVE-2026-115946 - XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affe INFORMATIONAL - Unknown 1 Details
CVE-2026-120740 CVE-2026-120740 - hivex: hivex: Denial of Service via out-of-bounds read in big-data block processing LOW 2.0 Red Hat Unknown 2 sources Details
CVE-2026-120185 CVE-2026-120185 - A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the fi MEDIUM 4.7 Unknown 1 Details
CVE-2026-120135 CVE-2026-120135 - Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. INFORMATIONAL - apache Unknown 1 Details
CVE-2026-118636 CVE-2026-118636 - **UNSUPPORTED WHEN ASSIGNED**  JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject CRITICAL 9.8 apache Unknown 1 Details
CVE-2026-120209 CVE-2026-120209 - AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens CRITICAL 9.8 Unknown 1 Details
CVE-2026-120208 CVE-2026-120208 - libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::proces HIGH 7.5 Unknown 1 Details
CVE-2026-120207 CVE-2026-120207 - Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to dele HIGH 7.1 Unknown 1 Details