Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-120207 CVE-2026-120207 - Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to dele HIGH 7.1 Unknown 1 Details
CVE-2026-120206 CVE-2026-120206 - Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forg MEDIUM 5.9 Unknown 1 Details
CVE-2026-120205 CVE-2026-120205 - Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows u HIGH 8.0 Unknown 1 Details
CVE-2026-120204 CVE-2026-120204 - DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows rem MEDIUM 5.6 oracle Unknown 1 Details
CVE-2026-120203 CVE-2026-120203 - ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users HIGH 8.8 Unknown 1 Details
CVE-2026-120202 CVE-2026-120202 - Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide mali MEDIUM 6.5 Unknown 1 Details
CVE-2026-120201 CVE-2026-120201 - Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gai CRITICAL 9.8 Unknown 1 Details
CVE-2026-120200 CVE-2026-120200 - Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, MEDIUM 5.4 Unknown 1 Details
CVE-2026-120199 CVE-2026-120199 - LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated u MEDIUM 4.3 Unknown 1 Details
CVE-2026-120210 CVE-2026-120210 - ffmpeg: ffmpeg: Information disclosure via path traversal in IMF demuxer MEDIUM 4.3 Red Hat Unknown 2 sources Details
CVE-2026-102212 CVE-2026-102212 - Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console serv INFORMATIONAL - Unknown 1 Details
CVE-2026-78192 CVE-2026-78192 - WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer INFORMATIONAL - Unknown 1 Details
CVE-2026-78191 CVE-2026-78191 - WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne d INFORMATIONAL - Unknown 1 Details
CVE-2026-78190 CVE-2026-78190 - WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing INFORMATIONAL - Unknown 1 Details
CVE-2026-78189 CVE-2026-78189 - WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the INFORMATIONAL - Unknown 1 Details
CVE-2026-78188 CVE-2026-78188 - WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attrib INFORMATIONAL - Unknown 1 Details
CVE-2026-15272 CVE-2026-15272 - The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' paramet MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-96554 CVE-2026-96554 - The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-76010 CVE-2026-76010 - The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Exec HIGH 8.8 wordpress Unknown 1 Details
CVE-2026-120114 CVE-2026-120114 - The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site HIGH 7.2 wordpress Unknown 1 Details