Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-54854 CVE-2026-54854 - Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions. MEDIUM 6.3 Unknown 1 Details
CVE-2026-54850 CVE-2026-54850 - Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-52710 CVE-2026-52710 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#821 MEDIUM 5.3 Unknown 1 Details
CVE-2026-48201 CVE-2026-48201 - Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-46560 CVE-2026-46560 - Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module op HIGH 7.5 Unknown 1 Details
CVE-2026-39786 CVE-2026-39786 - Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-39739 CVE-2026-39739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force U MEDIUM 6.5 Unknown 1 Details
CVE-2026-39738 CVE-2026-39738 - Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Inj CRITICAL 9.8 Unknown 1 Details
CVE-2026-39734 CVE-2026-39734 - Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. HIGH 7.5 Unknown 1 Details
CVE-2026-39732 CVE-2026-39732 - Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions. CRITICAL 9.3 Unknown 1 Details
CVE-2026-28160 CVE-2026-28160 - Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-27061 CVE-2026-27061 - Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions. MEDIUM 6.5 Unknown 1 Details
CVE-2026-120046 CVE-2026-120046 - Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows MEDIUM 5.3 Unknown 1 Details
CVE-2026-120007 CVE-2026-120007 - NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act MEDIUM 6.5 Unknown 1 Details
CVE-2026-119842 CVE-2026-119842 - A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle MEDIUM 6.5 Unknown 1 Details
CVE-2026-119729 CVE-2026-119729 - A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows MEDIUM 6.5 Unknown 1 Details
CVE-2026-119728 CVE-2026-119728 - A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with MEDIUM 5.5 Unknown 1 Details
CVE-2026-119727 CVE-2026-119727 - A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream con MEDIUM 6.5 Unknown 1 Details
CVE-2026-119526 CVE-2026-119526 - Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Roy CRITICAL 9.8 Unknown 1 Details
CVE-2026-119117 CVE-2026-119117 - Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the li MEDIUM 6.5 aws Unknown 1 Details