Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-118079 CVE-2026-118079 - Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118078 CVE-2026-118078 - Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118077 CVE-2026-118077 - Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118076 CVE-2026-118076 - Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118075 CVE-2026-118075 - Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-118074 CVE-2026-118074 - Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-118073 CVE-2026-118073 - Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116869 CVE-2026-116869 - Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-116868 CVE-2026-116868 - Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116867 CVE-2026-116867 - Contributor PHP Object Injection in Dynamic QR Code &#8211; generator <= 1.0.1 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116866 CVE-2026-116866 - Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. HIGH 8.8 Unknown 1 Details
CVE-2026-116865 CVE-2026-116865 - Editor PHP Object Injection in Zippy <= 1.7.0 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-116864 CVE-2026-116864 - Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. HIGH 7.2 Unknown 1 Details
CVE-2026-116848 CVE-2026-116848 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovatio MEDIUM 6.5 Unknown 1 Details
CVE-2026-115795 CVE-2026-115795 - P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next b INFORMATIONAL - Unknown 1 Details
CVE-2026-115794 CVE-2026-115794 - P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a INFORMATIONAL - Unknown 1 Details
CVE-2026-115793 CVE-2026-115793 - P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or obje INFORMATIONAL - Unknown 1 Details
CVE-2026-113576 CVE-2026-113576 - Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') MEDIUM 6.3 adobe Unknown 1 Details
CVE-2026-112256 CVE-2026-112256 - Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allow INFORMATIONAL - Unknown 1 Details
CVE-2026-112255 CVE-2026-112255 - Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows Ex INFORMATIONAL - Unknown 1 Details