rapid7

CVE-2026-119365: bPlugins Media Player Addons for Elementor – Media Player widget for WP: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting ...

CVE-2026-119365: bPlugins Media Player Addons for Elementor – Media Player widget for WP: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins ...
rapid7

CVE-2026-112605: Apple Xcode: This issue was addressed with improved handling of symlinks

This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files. With curated Threat Intelligence, you can see which ...
rapid7

CVE-2026-91913: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker ...
rapid7

CVE-2026-118697: JetBrains: In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon…

CVE-2026-118697: JetBrains: In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon…. View severity, references, and remediation details from ...
rapid7

Google Chrome Vulnerability: CVE-2026-119260

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
rapid7

CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report An attacker who can supply Brotli data that an application decompresses with node:zlib can corrupt ...
rapid7

CVE-2026-62013: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions. CVSS 3.1 Base Score: 9.8 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) With ...
rapid7

CVE-2026-62019: Liquid Web / StellarWP BookIt: Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured…

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.6.
rapid7

CVE-2026-118696: JetBrains: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and…

CVE-2026-118696: JetBrains: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and…. View severity ...
rapid7

CVE-2025-68395: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS

ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged attacker can inject arbitrary HTML and JS into notes, which will be ...
rapid7

CVE-2026-118100: Unknown BuddyForms: The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before…

CVE-2026-118100: Unknown BuddyForms: The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before…. View severity, references, and remediation ...