CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 30/10/2026 |
| CVE-2026-119727 | 보통6.5 | A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor initializer settings, an integer underflow in the upper-bound computation allows the parser to accept an out-of-range val | 30/10/2026 |
| CVE-2026-119526 | 심각9.8 | Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.
This issue affects Royal Event: from n/a through 2.0. | 30/10/2026 |
| CVE-2026-119117 | 보통6.5 | Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versions of the library pass | 30/10/2026 |
| CVE-2026-118090 | 높음8.8 | Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions. | 30/10/2026 |
| CVE-2026-118089 | 높음7.2 | Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions. | 30/10/2026 |
| CVE-2026-118086 | 높음8.8 | Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. | 30/10/2026 |
| CVE-2026-116862 | 높음7.5 | Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions. | 30/10/2026 |
| CVE-2026-116861 | 높음7.5 | Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions. | 30/10/2026 |
| CVE-2026-116854 | 보통6.5 | Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. | 30/10/2026 |
| CVE-2026-116853 | 보통6.5 | Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions. | 30/10/2026 |
| CVE-2026-116852 | 심각9.1 | Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. | 30/10/2026 |
| CVE-2026-116851 | 높음7.1 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions. | 30/10/2026 |
| CVE-2026-116847 | 높음7.1 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions. | 30/10/2026 |
| CVE-2026-116410 | 보통6.5 | Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions. | 30/10/2026 |
| CVE-2026-116405 | 높음7.1 | Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions. | 30/10/2026 |
| CVE-2026-116401 | 높음7.5 | Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. | 30/10/2026 |
| CVE-2026-116386 | 심각9.8 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | 30/10/2026 |