🛡️ CVE Intelligence Center
Common Vulnerabilities & Exposures — Security Intelligence Database
| CVE ID | Severity | CVSS | Description | Status | Published |
|---|---|---|---|---|---|
| CVE-2026-30818 | High | 8.0 |
An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent…
|
— | Apr 8, 2026 |
| CVE-2026-40030 | High | 7.8 |
parseusbs before 1.9 contains an OS command injection vulnerability where the volume listing path argument (-v flag) is …
|
— | Apr 8, 2026 |
| CVE-2026-40031 | High | 7.8 |
MemProcFS before 5.17 contains multiple unsafe library-loading patterns that enable DLL and shared-library hijacking acr…
|
— | Apr 8, 2026 |
| CVE-2026-5726 | High | 7.8 |
ASDA-Soft Stack-based Buffer Overflow Vulnerability
|
— | Apr 8, 2026 |
| CVE-2026-40029 | High | 7.8 |
parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsa…
|
— | Apr 8, 2026 |
| CVE-2026-40032 | High | 7.8 |
UAC (Unix-like Artifacts Collector) before 3.3.0-rc1 contains a command injection vulnerability in the placeholder subst…
|
— | Apr 8, 2026 |
| CVE-2025-50654 | High | 7.5 |
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in th…
|
— | Apr 8, 2026 |
| CVE-2025-50650 | High | 7.5 |
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the ro…
|
— | Apr 8, 2026 |
| CVE-2025-50653 | High | 7.5 |
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem paramet…
|
— | Apr 8, 2026 |
| CVE-2025-50652 | High | 7.5 |
An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint…
|
— | Apr 8, 2026 |
| CVE-2026-35525 | High | 7.5 |
LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.25.3, for {% include %},…
|
⚡ Exploit | Apr 8, 2026 |
| CVE-2025-52222 | High | 7.5 |
D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-840…
|
— | Apr 8, 2026 |
| CVE-2026-40036 | High | 7.5 |
Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote a…
|
— | Apr 8, 2026 |
| CVE-2026-3396 | High | 7.5 |
WCAPF – WooCommerce Ajax Product Filter plugin is vulnerable to time-based SQL Injection via the 'post-author' parameter…
|
— | Apr 8, 2026 |
| CVE-2026-5805 | High | 7.3 |
A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of…
|
— | Apr 8, 2026 |
| CVE-2026-5813 | High | 7.3 |
A weakness has been identified in PHPGurukul Online Course Registration 3.1. This vulnerability affects unknown code of …
|
— | Apr 8, 2026 |
| CVE-2026-5802 | High | 7.3 |
A vulnerability was identified in idachev mcp-javadc up to 1.2.4. Impacted is an unknown function of the component HTTP …
|
— | Apr 8, 2026 |
| CVE-2026-40027 | High | 7.3 |
ALEAPP (Android Logs Events And Protobuf Parser) through 3.4.0 contains a path traversal vulnerability in the NQ_Vault.p…
|
— | Apr 8, 2026 |
| CVE-2026-1343 | High | 7.2 |
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 …
|
— | Apr 8, 2026 |
| CVE-2026-4808 | High | 7.2 |
The Gerador de Certificados – DevApps plugin for WordPress is vulnerable to arbitrary file uploads due to missing file t…
|
— | Apr 8, 2026 |