CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- tucows easy cd & dvd cover creatorEasy CD & DVD Cover Creator 4.13 - Denial of Service5.1 Medium
- avalanche123 cassandra webCassandra Web 0.5.0 - Remote File Read8.7 High
- winavrWinAVR Version 20100110 - Insecure Folder Permissions7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: glib: memory corruption via integer overflow in unicode case conversion5.4 Medium
- n8nAuthenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.9.9 Critical
- askbotAskbot 0.12.2 - Insecure Direct Object Reference (IDOR)5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGlib: glib: local denial of service via buffer underflow in content type parsing2.8 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()4.2 Medium
- pix-link lv-wr21q, wr21q +1 moreDenial of Service in Pix-Link LV-WR21Q6.9 Medium
- pix-link lv-wr21q, wr21q +1 moreMissing Authentication for Critical Endpoint in Pix-Link LV-WR21Q6.9 Medium
- beckhoff automation beckhoff.device.manager.xar, mdp for beckhoff rt linux(r), mdp software package for twincat/bsd +2 moreBeckhoff: Information leak via Beckhoff Device Manager5.3 Medium
- beckhoff automation beckhoff.device.manager.xar, mdp for beckhoff rt linux(r), mdp software package for twincat/bsd +2 moreBeckhoff: Performing privileged operations and gaining administrator access7.8 High
- beckhoff automation beckhoff.device.manager.xar, mdp for beckhoff rt linux(r), mdp software package for twincat/bsd +2 moreBeckhoff: Arbitrary code execution within privileged processes8.8 High
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreMultiple cross-site scripting vulnerabilities in EZCast Pro II Dongle7.4 High
- ralim ironosInteger Overflow or Wraparound in IronOS9.8 Critical
- dell cloudboost virtual applianceDell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of...7.0 High
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreArbitrary file write to /tmp directory in EZCast Pro II Dongle5.7 Medium
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreUse of well-known default credentials in EZCast Pro II Dongle7.6 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured5.8 Medium
- is-daouda is-engineOut-of-bounds write in is-Engine6.5 Medium
- is-daouda is-engineMemory leak in is-Engine7.5 High
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreCross-Site Request Forgery in EZCast Pro II Dongle6.8 Medium
- gerstrong commander-geniusOut-of-bounds write in Commander-Genius7.5 High
- cadaver turso3dOut-of-bounds write in turso3d10.0 Critical
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +12 more +14 moreDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 High
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +5 more +7 moreUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 High
- ezcast pro iiMultiple Buffer Overflows in EZCast Pro II Dongle7.3 High
- ydb-platform ydba memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.6.9 Medium
- yacy search serverA XSS in yacy/yacy_search_server6.9 Medium
- fastshift x-trackA heap-based buffer over-read or buffer overflow vulnerability in FASTSHIFT/X-TRACK10.0 Critical
- ttttupup wxhelpera heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose.10.0 Critical
- turanszkij wickedengineA heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine.9.3 Critical
- turanszkij wickedengineA stack overflow vulnerability in turanszkij/WickedEngine5.1 Medium
- foxinmy weixin4jAn out-of-memory (OOM) issue in foxinmy/weixin4j6.3 Medium
- praydog uevrA heap-based buffer over-read that might affect a system that compiles untrusted Lua code in praydog/UEVR6.9 Medium
- praydog uevrA potential heap-buffer overflow in praydog/UEVR8.7 High
- datavane tisCookie Security Vulnerabilities in datavane/tis10.0 Critical
- datavane tisA XStream Security Vulnerability in XML Deserialization in datavane/tis10.0 Critical
- swoole swoole-srcA integer overflow in swoole/swoole-src10.0 Critical
- abcz316 skroot-linuxkernelrootA null pointer dereference in abcz316/SKRoot-linuxKernelRoot8.7 High
- root-project rootAn improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c9.3 Critical
- rootAn improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c9.3 Critical
- rethinkdbA buffer overflow in rethinkdb/rethinkdb10.0 Critical
- praydog reframeworkSave stack space while handling errors in praydog/REFramework6.9 Medium
- rawtherapeeA possible integer overflow vulnerability in RawTherapee/RawTherapee8.3 High
- liuyueyi quick-mediaBuffer Overflow Vulnerability in liuyueyi/quick-media5.3 Medium
- liuyueyi quick-mediaBuffer Write Security Vulnerability in liuyueyi/quick-media5.3 Medium
- visualfc liteideMishandles certain out-of-memory conditions in visualfc/liteide via liteidex/src/3rdparty/libvterm/src module6.7 Medium
- coolsnowwolf ledeA infinite loop vulnerability in coolsnowwolf/lede9.2 Critical
- coolsnowwolf ledeA possible infinite loop vulnerability in coolsnowwolf/lede9.2 Critical
- Show moreLoading…