CVEs published in January 2026
4,393 vulnerabilities, 438 critical, 16 exploited.
- microsoft maker.jsMaker.js Vulnerable to Unsafe Property Copying in makerjs.extendObject6.5 Medium
- angeljudesuarez school management systemitsourcecode School Management System index.php sql injection6.9 Medium
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_mode sub_41E2A0 os command injection5.3 Medium
- simsong bulk extractorbulk_extractor has Heap-based Buffer Overflow vulnerability5.5 Medium
dydx-v4-clientPyPIA single post-release of dydx-v4-client contained obfuscated multi-stage loaderNo score- color iccdeviccDEV has UB runtime error in <icTagTypeSignature>7.8 High
- code-projects online music sitecode-projects Online Music Site AdminReply.php sql injection6.9 Medium
- code-projects online music sitecode-projects Online Music Site AdminEditUser.php sql injection6.9 Medium
- linuxfoundation podman desktop, podman-desktop +1 morePodman Desktop Extension System Vulnerable to Authentication Bypass8.8 High
- nocodbNocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload8.5 High
- code-projects online music sitecode-projects Online Music Site AdminAddCategory.php sql injection5.1 Medium
- d-link dcs-700l, dlink dcs-700l firmware +1 moreD-Link DCS-700L Music File Upload Service setUploadMusic uploadmusic path traversal4.8 Medium
- nocodbNocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter5.7 Medium
- nocodbNocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality4.9 Medium
- nocodbNocoDB Vulnerable to Prototype Pollution in Connection Test Endpoint, Leading to DoS4.9 Medium
- sensiolabs symfonySymfony has incorrect argument escaping under MSYS2/Git Bash on Windows that can lead to destructive file operations6.3 Medium
- discourseDiscourse staff action logs expose sensitive information to moderators6.5 Medium
- discourseDiscourse allows permalinks to restricted resources to leak resource slugs to unauthorized users6.9 Medium
- hclsoftware bigfix complianceHCL BigFix Compliance is vulnerable to a sensitive information disclosure5.3 Medium
- discourseDiscourse topic conversion permission vulnerability for moderators6.5 Medium
- discourseDiscourse has insecure default configuration that allows non-admin moderators to takeover any non-staff account via email change5.1 Medium
- dell premiercolorDell PremierColor Panel Driver, versions prior to 1.0.0.1 A01, contains an Improper Access...7.8 High
- discourseDiscourse moderators can access admin-only reports exposing private upload URLs7.1 High
- discourseDiscourse Has Denial of Service (DoS) Vulnerability in Drafts Creation Endpoint6.5 Medium
- discourseDiscourse non-admin moderators can exfiltrate private content via post ownership transfer6.9 Medium
- discourseDiscourse users archives leaked to users with moderation privileges5.9 Medium
- discourseFinalDestination hostname matching allows SSRF protection bypass7.6 High
- drupal, silence form builder +1 moreCross-Site Scripting Vulnerability in Drupal Form Builder Module4.8 Medium
- discourseDiscourse AI Discover's continue conversation allows threat actor to impersonate user5.3 Medium
- drupal commerce payboxPayment bypass in Commerce Paybox8.7 High
- discourseDiscourse has DoS vulnerability in username change endpoint4.3 Medium
- discourseDiscourse subscriptions are susceptible to takeover7.1 High
- discourseDiscourse vulnerable to stored Cross-site Scripting via Katex in discourse-math plugin4.6 Medium
- discourseDiscourse allows script execution in uploaded HTML/XML files on S34.6 Medium
- openprojectOpenProject has Forced Actions, Content Spoofing, and Persistent DoS via ID Manipulation in OpenProject Blocknote Editor Extension6.3 Medium
- openprojectOpenProject has SSRF and CSWSH in Hocuspocus Synchronization Server8.9 High
- nvidia geforce, rtx, quadro, nvs +1 moreNVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a...5.5 Medium
- nvidia virtual gpu manager, geforce, rtx pro, rtx, quadro +1 more +3 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest...7.8 High
- nvidia geforce, guest driver, rtx pro, rtx, quadro +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an...7.8 High
- explorance blueUse of a hardcoded static key to protect sensitive data in Explorance Blue6.8 Medium
- nvidia geforce, guest driver, rtx pro, rtx, quadro +1 more +3 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...7.8 High
- nvidia geforce, rtx pro, rtx, quadro, tesla +2 moreNVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use...7.8 High
- explorance blueUnauthenticated Remote File Download in Explorance Blue9.9 Critical
- guidoneele pdw file browserPDW File Browser 1.3 - Remote Code Execution8.7 High
- smartdatasoft smartblogSmartBlog 2.0.1 - 'id_post' Blind SQL injection8.8 High
- nidesoft 3gp video converterNidesoft 3GP Video Converter 2.6.18 - Local Stack Buffer Overflow8.4 High
- pmb services servicesPMB 5.6 - 'chemin' Local File Disclosure6.9 Medium
- tildeslash ltd. m/monit, tildeslash m\/monit +1 moreM/Monit 3.7.4 - Privilege Escalation8.7 High
- tildeslash ltd. m/monit, tildeslash m\/monit +1 moreM/Monit 3.7.4 - Password Disclosure7.1 High
- zortam.com zortam mp3 media studioZortam Mp3 Media Studio 27.60 - Remote Code Execution (SEH)8.4 High
- Show moreLoading…