CVEs published January 5, 2026
77,396 CVEs in 2026
Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration…
A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version…
Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns.
A vulnerability was detected in code-projects Online Music Site 1.0.
A security vulnerability has been detected in code-projects Online Music Site 1.0.
A security flaw has been discovered in code-projects Online Product Reservation System 1.0.
A vulnerability was found in code-projects Online Product Reservation System 1.0.
A security vulnerability has been detected in code-projects Online Product Reservation System 1.0.
A security flaw has been discovered in code-projects Online Product Reservation System 1.0.
A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart.
A flaw has been found in Campcodes Supplier Management System 1.0.
A vulnerability was identified in code-projects Online Product Reservation System 1.0.
A vulnerability was determined in code-projects Online Product Reservation System 1.0.
A weakness has been identified in code-projects Online Product Reservation System 1.0.
A vulnerability was identified in itsourcecode Society Management System 1.0.
A vulnerability was determined in Tenda AC1206 15.03.06.23.
An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device that was only adopted via Ethernet.
A vulnerability was detected in code-projects Online Product Reservation System 1.0.
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1.
A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1.
A vulnerability was found in SourceCodester API Key Manager App 1.0.