CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- oisf suricataSuricata dnp3: unbounded transaction growth7.5 High
- oisf suricataSuricata DCERPC: unbounded fragment buffering leads to memory exhaustion7.5 High
- google chromeRace in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially...7.5 High
- phpgurukul online course registrationPHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on...6.5 Medium
- No product listedFile Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818...10.0 Critical
- atomberg erica smart fan firmwareAn issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to...7.4 High
- beatxp vega smartwatch firmwareAn issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to...7.4 High
- tenda ax3 firmwareTenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv...9.8 Critical
- tmsglobalsoft tms management consoleA path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818)...6.5 Medium
- ijl orjsonorjson does not limit recursion for deeply nested JSON documents7.5 High
- No product listedAn issue with WordPress directory names in WebPros WordPress Toolkit before 6.9.1 allows...8.8 High
- apryse html2pdfAn issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10....9.8 Critical
- apryse html2pdfA Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in...7.5 High
- group-office group office, intermesh groupoffice +1 moreGroup-Office has stored XSS vulnerability via unsanitized filenames5.1 Medium
- hustojHUSTOJ is Vulnerable to Stored CSV Injection (Formula Injection) in Contest Rank Export5.2 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion5.3 Medium
- charm soft serve, charmbracelet soft-serve +1 moreSoft Serve has Critical Authentication Bypass8.1 High
- open source opentofuOpenTofu before 1.11.4 Denial of Service via malicious zip2.3 Low
- docmostDocmost is vulnerable to stored Cross-Site Scripting (XSS) through Mermaid rendering6.3 Medium
- backstage, linuxfoundation backstage\/backend defaults +1 moreBackstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`3.5 Low
- backstage@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass6.3 Medium
- backstage, red hat developer hub 1.8, developer hub 1.9 +2 moreBackstage has a Possible Symlink Path Traversal in Scaffolder Actions7.1 High
- athroniaeth fastapi api key, fastapi-api-key +1 moreFastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection3.7 Low
- control-plane flux operator, controlplaneio-fluxcd flux-operator +1 moreFlux Operator Web UI Impersonation Bypass via Empty OIDC Claims5.3 Medium
- copier-org copierCopier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true6.9 Medium
- copier-org copierCopier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false6.8 Medium
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows affected by stored XSS in the artifact directory listing7.3 High
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT vulnerable to privilege escalation of users with staff status8.5 High
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT vulnerable to XSS via skeleton SVG images8.6 High
- saleorSaleor vulnerable to stored XSS via Unrestricted File Upload8.5 High
- saleorSaleor lacks proper HTML sanitization in rich text fields7.2 High
- 5ire5ire vulnerable to Remote Code Execution (RCE) via ECharts9.7 Critical
- 5ire5ire vulnerable to Remote Code Execution (RCE)9.7 Critical
- manageiqManageIQ vulnerable to DoS Attack when creating TimeProfiles7.1 High
- dataease sqlbotSQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability7.7 High
- arduino arduinocore-avrArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors6.9 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization7.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest allows null session ID to bypass session ID verification4.3 Medium
- linuxfoundation everest, everest everest-core +1 moreIn EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing4.3 Medium
- python, python software foundation cpython +1 morebase64.b64decode() always accepts "+/" characters, despite setting altchars6.3 Medium
- linuxfoundation libocpp, everest everest-core +1 moreEVerest affected by memory exhaustion in libocpp4.7 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest vulnerable to concatenation of strings literal and integers4.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop8.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service7.4 High
- lodash, lodash lodash-amd, lodash-es +119 more +121 morePrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's inadequate exception handling leads to denial of service6.5 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's use of assert functions can potentially lead to denial of service7.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver2.4 Low
- d-link d-view 8D-Link D-View 8 IDOR Allows Credential Disclosure and Account Takeover8.7 High
- d-link d-view 8D-Link D-View 8 Installer DLL Preloading via Uncontrolled Search Path8.4 High
- Show moreLoading…