CVEs published January 19, 2026
77,396 CVEs in 2026
HotCRP is conference review software.
An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1.
Unauthenticated requests could be proxied to remote environment agents, allowing access to remote environment resources without authentication.
Offscreen bitmap deletion leaves `gdi->drawing` pointing to freed memory, causing UAF when related update packets arrive.
`xf_Pointer_New` frees `cursorPixels` on failure, then `pointer_free` calls `xf_Pointer_Free` and frees it again, triggering ASan UAF.
A vulnerability present in version 1.7.65 and poetntially earlier versions allows unauthenticated users to bypass the mandatory authentication check in the roleBasedAuthMiddleware.
A client-side heap buffer overflow occurs in the ClearCodec bands decode path when crafted band coordinates allow writes past the end of the destination surface buffer.
A client-side heap buffer overflow occurs in the RDPGFX ClearCodec decode path when maliciously crafted residual data causes out-of-bounds writes during color output.
A client-side heap buffer overflow occurs in the FreeRDP client’s `gdi_SurfaceToSurface` path due to a mismatch between destination rectangle clamping and the actual copy size.
In ClearCodec, when `glyphData` is present, `clear_decompress` calls `freerdp_image_copy_no_overlap` without validating the destination rectangle, allowing an out-of-bounds read/write via crafted RDPGFX…
Prior to version 3.21.0,`freerdp_bitmap_decompress_planar` does not validate `nSrcWidth`/`nSrcHeight` against `planar->maxWidth`/`maxHeight` before RLE decode.
A flaw has been found in UTT HiPER 810 1.7.4-141218.
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12
Versions prior to 3.5.4 have a stored Cross-Site Scripting (XSS) vulnerability that allows an attacker to inject arbitrary HTML attributes into the `icon` attribute of a block via the…
Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0.
Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0.
Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0.
Altium 365 workspace endpoints were configured with an overly permissive Cross-Origin Resource Sharing (CORS) policy that allowed credentialed cross-origin requests from other Altium-controlled subdomains,…
A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309.
A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309.
A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309.
A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309.
A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513.
A vulnerability was found in UTT 进取 520W 1.7.7-180627.
A vulnerability has been found in UTT 进取 520W 1.7.7-180627.
A flaw has been found in UTT 进取 520W 1.7.7-180627.
A vulnerability was detected in UTT 进取 520W 1.7.7-180627.
When using the default configuration of Tandoor Recipes, specifically using SQLite and default `MEDIA_ROOT`, the full database file may be externally accessible, potentially on the Internet.
Versions 16.3.0 through 16.6.4 are affected by a stored cross-site scripting vulnerability in the Roadmap view.
The @fastify/express plugin adds full Express compatibility to Fastify.
A security vulnerability exists in @fastify/middie prior to version 9.1.0 where middleware registered with a specific path prefix can be bypassed using URL-encoded characters (e.g., `/%61dmin` instead of…
Versions prior to 2.1.3 are vulnerable to arbitrary SQL execution through unescaped analytics export/import and permissive admin SQL import.
The password authentication mechanism transmits passwords via URL query parameters instead of the HTTP request body.
Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass deny IP rules.This issue affects Server: from 2025.3.1 through 2025.3.12.
The markdown feature allows unrestricted server side html-rendering which allows arbitrary file read (LFD).
ChatterBot versions up to 1.2.10 are vulnerable to a denial-of-service condition caused by improper database session and connection pool management.
An integer overflow in the API component's protobuf decoder allows denial-of-service attacks when API encryption is not used.
FastGlyph parsing trusts `cbData`/remaining length and never validates against the minimum size implied by `cx/cy`.
HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability.
Versions of the software prior to commit 1d32081a66f21bcf41df1ecb672490b13f6e429f have a stored cross-site scripting vulnerability that can be rendered to an admin when they attempt to migrate a user's…
A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01.
A vulnerability was detected in Yonyou KSOA 9.0.
A security vulnerability has been detected in Yonyou KSOA 9.0.
A weakness has been identified in Yonyou KSOA 9.0.
A security flaw has been discovered in itsourcecode School Management System 1.0.
A security vulnerability has been detected in PHPGurukul Directory Management System 1.0.
A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0.
A vulnerability was determined in Yonyou KSOA 9.0.
A vulnerability was found in Yonyou KSOA 9.0.
A vulnerability has been found in Yonyou KSOA 9.0.
A flaw has been found in Yonyou KSOA 9.0.
A vulnerability was detected in Yonyou KSOA 9.0.
An Insecure Direct Object Reference (IDOR) vulnerability exists in the offer view functionality.
HotCRP is conference review software.
Versions prior to 3.5.4 contain a logic vulnerability in the /api/file/globalCopyFiles endpoint.
A rate limiting bypass via `X-Forwarded-For` header spoofing allows unauthenticated attackers to bypass IP-based rate limiting on general API endpoints.
Users of OpenProject versions prior to 16.6.5 and 17.0.1 have the ability to view and end their active sessions via Account Settings → Sessions.
Wings does not consider SQLite max parameter limit when processing activity log entries allowing for low privileged user to trigger a condition that floods the panel with activity records.
The application uses the Ruby `eval()` function to dynamically execute a string provided by the `resource_handler.engine_name` attribute in `Alchemy::ResourcesHelper#resource_url_proxy`.
A vulnerability was identified in MineAdmin 1.x/2.x.
A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309.
A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309.
A flaw has been found in quickjs-ng quickjs up to 0.11.0.
A vulnerability was detected in quickjs-ng quickjs up to 0.11.0.
A vulnerability was identified in PHPGurukul News Portal 1.0.
Versions prior to 3.5.4 are vulnerable to reflected cross-site scripting in /api/icon/getDynamicIcon due to unsanitized SVG input.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.SharedAuthorizationView' modules) allows Cross-Site Scripting…
Versions prior to 1.28.3 are vulnerable to Server-Side Request Forgery (SSRF) via HTML Check CSS Download.
A non-existing permission check for the CrawlChat's Discord bot allows non-manage guild users to put malicious content onto the collection knowledge base.
A denial-of-service vulnerability due to improper input validation allows a remote attacker to crash the service via a malformed HTTP header.
File Browser provides a file managing interface within a specified directory and can be used to upload, delete, preview, rename, and edit files.
Mailpit's SMTP server is vulnerable to Header Injection due to an insufficient Regular Expression used to validate `RCPT TO` and `MAIL FROM` addresses.
A vulnerability was identified in birkir prime up to 0.4.0.beta.0.
A vulnerability was determined in birkir prime up to 0.4.0.beta.0.
A vulnerability was found in birkir prime up to 0.4.0.beta.0.
A vulnerability has been found in birkir prime up to 0.4.0.beta.0.
A flaw has been found in birkir prime up to 0.4.0.beta.0.
A vulnerability was detected in birkir prime up to 0.4.0.beta.0.
A security vulnerability has been detected in technical-laohu mpay up to 1.2.4.
Swing Music's `list_folders()` function in the `/folder/dir-browser` endpoint is vulnerable to directory traversal attacks.
Versions prior to 0.1.5 have an insecure direct object reference vulnerability.
When using groups in OpenProject to manage users, the group members should only be visible to users that have the View Members permission in any project that the group is also a member of.
A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0.
A flaw has been found in SourceCodester E-Learning System 1.0.
A vulnerability was detected in technical-laohu mpay up to 1.2.4.
A vulnerability was determined in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0.
A security flaw has been discovered in PHPGurukul News Portal 1.0.
A security flaw has been discovered in itsourcecode Society Management System 1.0.
A vulnerability was identified in itsourcecode Society Management System 1.0.
`knowledgeBase.removeFilesFromKnowledgeBase` tRPC ep allows authenticated users to delete files from any knowledge base without verifying ownership. `userId` filter in the database query is commented out,…
A vulnerability was detected in pbrong hrms 1.0.1.
A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0.
A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0.
A weakness has been identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb.
A weakness has been identified in technical-laohu mpay up to 1.2.4.