Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor i...
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0....
Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obta...
Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions....
Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions....
Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions....
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions....
Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions....
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions....
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions....
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions....
Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions....
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions....
Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions....
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-113499. Reason: This candidate is a reservation duplicate of CVE-2026-113499. Notes: All CVE users should reference...
Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions....
Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions....
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31....