The archive.

CVE-2025-70231 · mitre

D-Link DIR-513 version 1.10 contains a critical-level vulnerability.

CVE-2025-70232 · mitre

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter.

CVE-2025-70233 · mitre

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard.

CVE-2025-29165 · mitre

An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-70948 · mitre

A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and…

EPSS 0.4%CVSS 9.3

TryGhost1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-29053 · TryGhost Ghost

Ghost Vulnerable to Remote Code Execution via Malicious Themes

EPSS 5%CVSS 9.8

zephyrproject-rtos1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-1678 · zephyrproject-rtos Zephyr

dns: memory‑safety issue in the DNS name parser

EPSS 0.4%public exploit CVSS 9.8

International Datacasting Corporation2 vulnerabilities on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-29128 · International Datacasting Corporation SFX2100 Satellite Receiver

IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files

EPSS 0.3%public exploit CVSS 10.0

CVE-2026-29127 · International Datacasting Corporation SFX2100 Satellite Receiver

Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100

EPSS 0.2%public exploit CVSS 9.2

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-2418 · Unknown Login with Salesforce

Login with Salesforce <= 1.0.2 - Unauthenticated Authentication Bypass

EPSS 0.4%public exploit CVSS 9.1

AncoraThemes2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-22451 · AncoraThemes Handyman

WordPress Handyman theme <= 1.4.7 - PHP Object Injection vulnerability

CVE-2026-22497 · AncoraThemes Jardi

WordPress Jardi theme <= 1.7.2 - PHP Object Injection vulnerability

axiomthemes2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-22501 · axiomthemes Mounthood

WordPress Mounthood theme <= 1.3.2 - PHP Object Injection vulnerability

CVE-2026-22475 · axiomthemes Estate

WordPress Estate theme <= 1.3.4 - PHP Object Injection vulnerability

Builderall1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-22390 · Builderall Builderall Builder for WordPress

WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability

Cloudflare2 vulnerabilities on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-2835 · Cloudflare https://github.com/cloudflare/pingora

HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing

EPSS 0.8%CVSS 9.3

CVE-2026-2833 · Cloudflare https://github.com/cloudflare/pingora

HTTP Request Smuggling via Premature Upgrade

EPSS 0.7%CVSS 9.3

honojs1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-29045 · honojs hono

Hono: Arbitrary file access via serveStatic vulnerability

PMQS1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-3381 · PMQS Compress::Raw::Zlib

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

ThemeGoods1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-22417 · ThemeGoods Grand Wedding

WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability

ThemeREX10 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-54001 · ThemeREX Classter

WordPress Classter theme <= 2.5 - PHP Object Injection vulnerability

CVE-2026-22453 · ThemeREX Pets Club

WordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerability

CVE-2026-22454 · ThemeREX Solaris

WordPress Solaris theme <= 2.5 - PHP Object Injection vulnerability

CVE-2026-22474 · ThemeREX Equestrian Centre

WordPress Equestrian Centre theme <= 1.5 - PHP Object Injection vulnerability

CVE-2026-28043 · ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme

WordPress Healer - Doctor, Clinic & Medical WordPress Theme theme <= 1.0.0 - Local File Inclusion vulnerability

CVE-2026-27437 · ThemeREX Tennis Club

WordPress Tennis Club theme <= 1.2.3 - PHP Object Injection vulnerability

CVE-2026-27438 · ThemeREX Kingler

WordPress Kingler theme <= 1.7 - PHP Object Injection vulnerability

CVE-2026-27439 · ThemeREX Dentario

WordPress Dentario theme <= 1.5 - PHP Object Injection vulnerability

CVE-2026-28074 · ThemeREX Pizza House

WordPress Pizza House theme <= 1.4.0 - PHP Object Injection vulnerability

CVE-2026-28105 · ThemeREX Good Energy

WordPress Good Energy theme <= 1.7.7 - PHP Object Injection vulnerability

zozothemes4 vulnerabilities on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-68553 · zozothemes Lendiz

WordPress Lendiz theme < 2.0.1 - Arbitrary File Upload vulnerability

CVE-2025-68554 · zozothemes Keenarch

WordPress Keenarch theme < 2.0.1 - Arbitrary File Upload vulnerability

CVE-2025-68555 · zozothemes Nutrie

WordPress Nutrie theme < 2.0.1 - Arbitrary File Upload vulnerability

CVE-2026-24960 · zozothemes Charety

WordPress Charety theme < 2.0.2 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.9

CHORNY1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-40931 · CHORNY Apache::Session::Generate::MD5

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id

EPSS 0.6%CVSS 9.1

designthemes2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-27389 · designthemes WeDesignTech Ultimate Booking Addon

WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability

CVE-2026-27983 · designthemes LMS Elementor Pro

WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability

KAZEBURO1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-40926 · KAZEBURO Plack::Middleware::Session::Simple

Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely

Seiko Epson Corporation1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-23767 · Seiko Epson Corporation ESC/POS

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorizati…

TOKUHIROM1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-3257 · TOKUHIROM UnQLite

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library

SeventhQueen1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-27417 · SeventhQueen Sweet Date

WordPress Sweet Date theme < 4.0.1 - PHP Object Injection vulnerability