CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- google android, mediatek, inc. mediatek chipset +1 moreIn mminfra, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn c2ps, there is a possible memory corruption due to use after free. This could lead to local...7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn battery, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn battery, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High
- google android, mediatek, inc. mediatek chipset +1 moreIn imgsys, there is a possible out of bounds write due to improper input validation. This could...7.8 High
- mediatek nr15, nr16, nr17 +1 more +3 moreIn Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This...6.5 Medium
- mediatek nr15, nr16, nr17 +1 more +3 moreIn Modem, there is a possible system crash due to incorrect error handling. This could lead to...6.5 Medium
- mediatek nr17, mediatek, inc. mediatek chipset +1 moreIn Modem, there is a possible system crash due to incorrect error handling. This could lead to...6.5 Medium
- mediatek nr15, nr16, nr17 +2 more +4 moreIn Modem, there is a possible system crash due to incorrect error handling. This could lead to...6.5 Medium
- mediatek nr15, nr16, nr17 +2 more +4 moreIn Modem, there is a possible system crash due to improper input validation. This could lead to...6.5 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High
- color iccdeviccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion9.8 Critical
- tecno boomplay, tecno mobile com.afmobi.boomplayer +1 moreInsufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi...9.8 Critical
- color iccdeviccDEV has a Memory Leak in its CIccProfileXml::ParseTag() Error Path3.3 Low
- color iccdeviccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()7.8 High
- convoypanel panelPterodactyl TOTPs can be reused during validity window6.5 Medium
- convoypanel panel, pterodactyl wings +1 morePterodactyl does not revoke SFTP access when server is deleted or permissions reduced7.5 High
- iamb crypt::sodium::xs, crypt\ +1 moreCrypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium9.8 Critical
- color iccdeviccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()7.5 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- njhyst hy511 firmwareAn issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The...9.8 Critical
- blueaccesstech cobalt x1Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows...9.8 Critical
- h3c magic ba1500l firmware, mc102-g firmware +1 moreAn issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless...9.8 Critical
- dwyeromega isensix advanced remote monitoring system firmwareDwyerOmega Isensix Advanced Remote Monitoring System (ARMS) 1.5.7 allows an attacker to retrieve...7.5 High
- code-projects online music sitecode-projects Online Music Site AdminViewSongs.php sql injection6.9 Medium
- aio-libs aiohttpAIOHTTP Vulnerable to Cookie Parser Warning Storm2.7 Low
- aio-libs aiohttpAIOHTTP vulnerable to DoS through chunked messages6.6 Medium
- aio-libs aiohttpAIOHTTP vulnerable to denial of service through large payloads6.6 Medium
- aio-libs aiohttpAIOHTTP vulnerable to DoS when bypassing asserts6.6 Medium
- aio-libs aiohttpAIOHTTP Regex Mismatch Allows Unicode in ASCII-Only Protocol Fields2.7 Low
- code-projects online music sitecode-projects Online Music Site Albums.php sql injection6.9 Medium
- aio-libs aiohttpAIOHTTP allows for a brute-force leak of internal static filepath components6.3 Medium
- aio-libs aiohttpAIOHTTP's Unicode processing of header values could cause parsing discrepancies6.3 Medium
- aio-libs aiohttp, red hat openshift lightspeed, openshift service mesh 2 +18 more +20 moreAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb7.5 High
- elated-themes frappeCertain Frappe requests are vulnerable to Path Traversal7.5 High
- difyDify Vulnerable to Plaintext API Key Exposure via Model Provider Configuration Endpoint8.4 High
- vega, vega-functions project vega-functions +1 more`vega-functions` vulnerable to Cross-site Scripting via `setdata` function7.2 High
- vegaVega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope8.1 High
- d-link dir-600, dir-608, dir-610 +14 more +16 moreD-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint9.3 Critical
- linuxfoundation spinnakerSpinnaker vulnerable to SSRF due to improper restrictions on http from user input7.9 High
- anthropic mcp typescript sdkMCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS8.7 High
- coollabs coolifyCoolify has host header injection in forgot password8.5 High
- coollabs coolifyColify has command injection vulnerability in project git source9.4 Critical
- coollabs coolifyCoolify has a Privilege Escalation - low privileged users can see and use admin invitation links7.7 High
- code-projects online music sitecode-projects Online Music Site login.php sql injection6.9 Medium
- coollabs coolifyRate-limit bypass on login via X-Forwarded-Host header5.5 Medium
- suse harvesterHarvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer9.8 Critical
- redaxoRedaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read8.3 High
- openzeppelin openzeppelin-confidential-contractsOpenZeppelin Confidential Contracts ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.6.6 Medium
github.com/bishopfox/sliverGoSliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass5.5 Medium- Show moreLoading…