# CVEs published 2026-01-15

198 CVEs were published on January 15, 2026: 23 critical, 89 high. Days are UTC.

- [CVE-2025-14237](https://cve.now/CVE-2025-14237.md): Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the (CVSS 9.3, Canon Satera LBP670C Series · Canon Satera MF750C Series +19)
- [CVE-2025-14236](https://cve.now/CVE-2025-14236.md): Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(\*) which may allow an attacker on the networ (CVSS 9.3, Canon Satera LBP670C Series · Canon Satera MF750C Series +19)
- [CVE-2025-14235](https://cve.now/CVE-2025-14235.md): Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on (CVSS 9.3, Canon Satera LBP670C Series · Canon Satera MF750C Series +19)
- [CVE-2025-14234](https://cve.now/CVE-2025-14234.md): Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on the netw (CVSS 9.3, Canon Satera LBP670C Series · Canon Satera MF750C Series +19)
- [CVE-2025-14233](https://cve.now/CVE-2025-14233.md): Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on th (CVSS 9.3, Canon Satera LBP670C Series · Canon Satera MF750C Series +19)
- [CVE-2025-14232](https://cve.now/CVE-2025-14232.md): Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on th (CVSS 9.3, Canon Satera LBP670C Series · Canon Satera MF750C Series +19)
- [CVE-2025-14231](https://cve.now/CVE-2025-14231.md): Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(\*) which may allow an attacker on t (CVSS 9.3, Canon Satera LBP670C Series · Canon Satera MF750C Series +19)
- [CVE-2021-47815](https://cve.now/CVE-2021-47815.md): Nsauditor 3.2.3 - Denial of Service (PoC) (CVSS 6.7, Nsauditor)
- [CVE-2021-47814](https://cve.now/CVE-2021-47814.md): NBMonitor 1.6.8 - Denial of Service (PoC) (CVSS 6.7, Nsauditor NBMonitor)
- [CVE-2021-47813](https://cve.now/CVE-2021-47813.md): Backup Key Recovery 2.2.7 - Denial of Service (PoC) (CVSS 6.7, Nsauditor Backup Key Recovery)
- [CVE-2021-47812](https://cve.now/CVE-2021-47812.md): GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2) (CVSS 9.3, Getgrav GravCMS)
- [CVE-2021-47811](https://cve.now/CVE-2021-47811.md): Grocery crud 1.6.4 - 'order\_by' SQL Injection (CVSS 8.8, Grocerycrud Grocery crud)
- [CVE-2021-47810](https://cve.now/CVE-2021-47810.md): WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path (CVSS 8.5, WibuKey Runtime)
- [CVE-2021-47809](https://cve.now/CVE-2021-47809.md): Disk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterprise' Unquoted Service Path (CVSS 8.5, Disksorter Disk Sorter Enterprise)
- [CVE-2021-47808](https://cve.now/CVE-2021-47808.md): Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting (CVSS 5.1, cotonti.com Cotonti Siena)
- [CVE-2021-47807](https://cve.now/CVE-2021-47807.md): Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path (CVSS 8.5, Syncbreeze Sync Breeze)
- [CVE-2021-47806](https://cve.now/CVE-2021-47806.md): Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path (CVSS 8.5, Dupscout Dup Scout)
- [CVE-2021-47805](https://cve.now/CVE-2021-47805.md): Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path (CVSS 8.5, Disksavvy Disk Savvy)
- [CVE-2021-47804](https://cve.now/CVE-2021-47804.md): Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path (CVSS 8.5, Wisecleaner Wise Care)
- [CVE-2021-47803](https://cve.now/CVE-2021-47803.md): iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path (CVSS 8.5, I-Funbox iFunbox)
- [CVE-2021-47801](https://cve.now/CVE-2021-47801.md): Vianeos OctoPUS 5 - 'login\_user' SQLi (CVSS 8.8, Vianeos OctoPUS)
- [CVE-2021-47800](https://cve.now/CVE-2021-47800.md): b2evolution 7.2.2 - 'edit account details' Cross-Site Request Forgery (CSRF) (CVSS 6.9, b2evolution)
- [CVE-2021-47798](https://cve.now/CVE-2021-47798.md): NoteBurner 2.35 - Denial Of Service (DoS) (PoC) (CVSS 6.7, NoteBurner)
- [CVE-2021-47797](https://cve.now/CVE-2021-47797.md): Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC) (CVSS 6.7, Leawo Prof. Media)
- [CVE-2021-47796](https://cve.now/CVE-2021-47796.md): Denver SHO-110 IP Camera Unauthenticated Snapshot Access (CVSS 8.7, Denver SHO-110)
- [CVE-2021-47795](https://cve.now/CVE-2021-47795.md): GeoVision Geowebserver 5.3.3 - Local FIle Inclusion (CVSS 8.7, GeoVision Geowebserver)
- [CVE-2021-47794](https://cve.now/CVE-2021-47794.md): ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated) (CVSS 8.7, ZesleCP)
- [CVE-2021-47793](https://cve.now/CVE-2021-47793.md): Telegram Desktop 2.9.2 - Denial of Service (PoC) (CVSS 4.6, Telegram Desktop)
- [CVE-2021-47792](https://cve.now/CVE-2021-47792.md): Remote Mouse 4.002 - Unquoted Service Path (CVSS 8.5, Remotemouse Remote Mouse)
- [CVE-2021-47791](https://cve.now/CVE-2021-47791.md): SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service (CVSS 4.6, SmartFTP Client)
- [CVE-2021-47790](https://cve.now/CVE-2021-47790.md): Active WebCam 11.5 - Unquoted Service Path (CVSS 8.5, Pysoft Active WebCam)
- [CVE-2021-47789](https://cve.now/CVE-2021-47789.md): Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial of Service (PoC) (CVSS 6.8, Yenkee Hornet Gaming Mouse)
- [CVE-2021-47788](https://cve.now/CVE-2021-47788.md): WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated) (CVSS 8.7, WebsiteBaker)
- [CVE-2021-47787](https://cve.now/CVE-2021-47787.md): TotalAV 5.15.69 - Unquoted Service Path (CVSS 8.5, TotalAV)
- [CVE-2021-47786](https://cve.now/CVE-2021-47786.md): Redragon Gaming Mouse - 'REDRAGON\_MOUSE.sys' Denial of Service (PoC) (CVSS 6.8, Redragon Gaming Mouse)
- [CVE-2021-47785](https://cve.now/CVE-2021-47785.md): Ether\_MP3\_CD\_Burner 1.3.8 - Buffer Overflow (SEH) (CVSS 7.0, Mp3-Avi-Mpeg-Wmv-Rm-To-Audio-Cd-Burner Ether\_MP3\_CD\_Burner)
- [CVE-2021-47783](https://cve.now/CVE-2021-47783.md): Phpwcms 1.9.30 - Arbitrary File Upload (CVSS 5.3, Phpwcms)
- [CVE-2021-47782](https://cve.now/CVE-2021-47782.md): Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection (CVSS 7.1, Odinesolutions Odine Solutions GateKeeper)
- [CVE-2021-47780](https://cve.now/CVE-2021-47780.md): Macro Expert 4.7 - Unquoted Service Path (CVSS 8.5, Macro-Expert Macro Expert)
- [CVE-2021-47779](https://cve.now/CVE-2021-47779.md): Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation (CVSS 8.4, Dolibarr CRM)
- [CVE-2021-47756](https://cve.now/CVE-2021-47756.md): Laravel Valet 2.0.3 - Local Privilege Escalation (macOS) (CVSS 8.4, Laravel Valet)
- [CVE-2020-36930](https://cve.now/CVE-2020-36930.md): SysGauge 7.9.18 - ' SysGauge Server' Unquoted Service Path (CVSS 8.5, SysGauge)
- [CVE-2020-36929](https://cve.now/CVE-2020-36929.md): Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path (CVSS 8.5, Support Brother BRPrint Auditor)
- [CVE-2020-36928](https://cve.now/CVE-2020-36928.md): Brother BRAgent 1.38 - 'WBA\_Agent\_Client' Unquoted Service Path (CVSS 8.5, Brother BRAgent)
- [CVE-2020-36927](https://cve.now/CVE-2020-36927.md): DiskPulse 13.6.14 - Unquoted Service Path (CVSS 8.5, DiskPulse)
- [CVE-2020-36926](https://cve.now/CVE-2020-36926.md): SmarterTools SmarterTrack 7922 -Information Disclosure (CVSS 6.9, SmarterTools SmarterTrack)
- [CVE-2026-1011](https://cve.now/CVE-2026-1011.md): Stored Cross-Site Scripting in Altium Live Support Center Comment Endpoint (CVSS 6.1, Altium Live)
- [CVE-2026-1010](https://cve.now/CVE-2026-1010.md): Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation (CVSS 8.0, Altium Enterprise Server)
- [CVE-2026-22864](https://cve.now/CVE-2026-22864.md): Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass (CVSS 8.1, denoland deno · deno)
- [CVE-2026-22863](https://cve.now/CVE-2026-22863.md): Deno node:crypto doesn't finalize cipher (CVSS 9.2, denoland deno · deno)
- [CVE-2026-1009](https://cve.now/CVE-2026-1009.md): Stored Cross-Site Scripting in Altium Live Forum Leading to Cross-Customer Data Exposure (CVSS 9.0, Altium Live)
- [CVE-2026-22045](https://cve.now/CVE-2026-22045.md): Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall (CVSS 5.9, traefik · github.com/traefik/traefik/v3 +2)
- [CVE-2025-68671](https://cve.now/CVE-2025-68671.md): lakeFS is Missing Timestamp Validation in S3 Gateway Authentication (CVSS 6.5, treeverse lakeFS · github.com/treeverse/lakefs)
- [CVE-2026-1008](https://cve.now/CVE-2026-1008.md): Stored Cross-Site Scripting in Altium Live User Profile Fields (CVSS 7.6, Altium Live)
- [CVE-2026-0915](https://cve.now/CVE-2026-0915.md): getnetbyaddr and getnetbyaddr\_r leak stack contents to DNS resovler (CVSS 7.5, The GNU C Library glibc)
- [CVE-2023-7334](https://cve.now/CVE-2023-7334.md): Changjetong T+ \<= 16.x GetStoreWarehouseByStore Deserialization RCE (CVSS 9.3, Changjetong Information Technology Co. T+)
- [CVE-2011-10041](https://cve.now/CVE-2011-10041.md): Uploadify \<= 1.0 Unauthenticated Arbitrary File Upload (CVSS 9.3, Steven Uploadify)
- [CVE-2026-1002](https://cve.now/CVE-2026-1002.md): Eclipse Vert.x Web static handler file access denial (CVSS 6.9, Eclipse Vert.x · io.vertx:vertx-core)
- [CVE-2026-21921](https://cve.now/CVE-2026-21921.md): Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2026-21920](https://cve.now/CVE-2026-21920.md): Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2026-21918](https://cve.now/CVE-2026-21918.md): Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2026-21917](https://cve.now/CVE-2026-21917.md): Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2026-21914](https://cve.now/CVE-2026-21914.md): Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2026-21913](https://cve.now/CVE-2026-21913.md): Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2026-21912](https://cve.now/CVE-2026-21912.md): Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2026-21911](https://cve.now/CVE-2026-21911.md): Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop (CVSS 6.5, Juniper Networks Junos OS Evolved)
- [CVE-2026-21910](https://cve.now/CVE-2026-21910.md): Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2026-21909](https://cve.now/CVE-2026-21909.md): Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2026-21908](https://cve.now/CVE-2026-21908.md): Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process (CVSS 7.1, Juniper Networks Junos OS)
- [CVE-2026-21907](https://cve.now/CVE-2026-21907.md): Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers) (CVSS 5.9, Juniper Networks Junos Space)
- [CVE-2026-21906](https://cve.now/CVE-2026-21906.md): Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2026-21905](https://cve.now/CVE-2026-21905.md): Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2026-21903](https://cve.now/CVE-2026-21903.md): Junos OS: Subscribing to telemetry sensors at scale causes all FPCs to crash (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2026-0203](https://cve.now/CVE-2026-0203.md): Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-60011](https://cve.now/CVE-2025-60011.md): Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap (CVSS 5.8, Juniper Networks Junos OS)
- [CVE-2025-60007](https://cve.now/CVE-2025-60007.md): Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2025-60003](https://cve.now/CVE-2025-60003.md): Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2025-59961](https://cve.now/CVE-2025-59961.md): Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2025-59960](https://cve.now/CVE-2025-59960.md): Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2025-59959](https://cve.now/CVE-2025-59959.md): Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2025-52987](https://cve.now/CVE-2025-52987.md): Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed (CVSS 6.1, Juniper Networks Paragon Automation)
- [CVE-2025-15265](https://cve.now/CVE-2025-15265.md): Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR) (CVSS 5.3, Svelte)
- [CVE-2026-23746](https://cve.now/CVE-2026-23746.md): Entrust Instant Financial Issuance (IFI) SmartCardController Service .NET Remoting RCE (CVSS 9.3, Entrust Instant Financial Issuance)
- [CVE-2026-23622](https://cve.now/CVE-2026-23622.md): CSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeover (CVSS 7.4, alextselegidis easyappointments · alextselegidis/easyappoin…)
- [CVE-2026-23527](https://cve.now/CVE-2026-23527.md): h3 v1 has Request Smuggling (TE.TE) issue (CVSS 8.9, h3js h3 · h3)
- [CVE-2026-23520](https://cve.now/CVE-2026-23520.md): Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE (CVSS 9.1, getarcaneapp arcane · github.com/getarcaneapp/arcane/backend)
- [CVE-2026-23519](https://cve.now/CVE-2026-23519.md): RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz (CVSS 8.9, RustCrypto utils · cmov)
- [CVE-2026-23511](https://cve.now/CVE-2026-23511.md): ZITADEL has a user enumeration vulnerability in Login UIs (CVSS 5.3, zitadel · github.com/zitadel/zitadel)
- [CVE-2026-22775](https://cve.now/CVE-2026-22775.md): devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse (CVSS 7.5, sveltejs devalue · devalue)
- [CVE-2026-22774](https://cve.now/CVE-2026-22774.md): devalue vulnerable to denial of service due to memory exhaustion in devalue.parse (CVSS 7.5, sveltejs devalue · devalue)
- [CVE-2026-0227](https://cve.now/CVE-2026-0227.md): PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal (CVSS 6.6, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-22249](https://cve.now/CVE-2026-22249.md): Docmost affected by an Arbitrary File Write via Zip Import Feature (ZipSlip) (CVSS 7.1, docmost)
- [CVE-2026-22803](https://cve.now/CVE-2026-22803.md): SvelteKit has a memory amplification DoS in Remote Functions binary form deserializer (CVSS 8.2, sveltejs kit · @sveltejs/kit)
- [CVE-2025-67647](https://cve.now/CVE-2025-67647.md): SvelteKit Denial of service and possible SSRF when using prerendering (CVSS 8.4, sveltejs kit · @sveltejs/kit +1)
- [CVE-2025-13845](https://cve.now/CVE-2025-13845.md): CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) (CVSS 8.4, Schneider Electric EcoStruxure Power Build Rapsody)
- [CVE-2025-13844](https://cve.now/CVE-2025-13844.md): CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file (SSD fi (CVSS 8.4, Schneider Electric EcoStruxure Power Build Rapsody)
- [CVE-2025-36911](https://cve.now/CVE-2025-36911.md): In key-based pairing, there is a possible ID due to a logic error in the code. (CVSS 7.1, Google Android)
- [CVE-2025-9014](https://cve.now/CVE-2025-9014.md): Null Pointer Dereference Vulnerability on TL-WR841N (CVSS 6.3, TP-Link Systems TL-WR841N)
- [CVE-2026-23496](https://cve.now/CVE-2026-23496.md): Pimcore Web2Print Tools Bundle "Favourite Output Channel Configuration" Missing Function Level Authorization (CVSS 5.4, pimcore · pimcore/web2print-tools-bundle)
- [CVE-2026-23494](https://cve.now/CVE-2026-23494.md): Pimcore is Missing Function Level Authorization on "Static Routes" Listing (CVSS 4.3, pimcore · pimcore/pimcore)
- [CVE-2026-23495](https://cve.now/CVE-2026-23495.md): Pimcore's Admin Classic Bundle is Missing Function Level Authorization on "Predefined Properties" Listing (CVSS 4.3, pimcore · pimcore/admin-ui-classic-bundle)
- [CVE-2025-62193](https://cve.now/CVE-2025-62193.md): NOAA PMEL Live Access Server (LAS) PyFerret command injection (CVSS 9.3, National Oceanic and Atmospheric Administration (NOAA) Live…)
- [CVE-2026-23493](https://cve.now/CVE-2026-23493.md): Pimcore ENV Variables and Cookie Informations are exposed in http\_error\_log (CVSS 8.6, pimcore · pimcore/pimcore)
- [CVE-2026-20075](https://cve.now/CVE-2026-20075.md): Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Evolved Programmable Network Manager · Cisco Prime In…)
- [CVE-2026-20047](https://cve.now/CVE-2026-20047.md): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Identity Services Engine Software)
- [CVE-2026-20076](https://cve.now/CVE-2026-20076.md): Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Identity Services Engine Software)
- [CVE-2026-22867](https://cve.now/CVE-2026-22867.md): LaSuite Doc affected by Stored XSS via Interlinking Block (CVSS 8.7, suitenumerique docs)
- [CVE-2026-22265](https://cve.now/CVE-2026-22265.md): Roxy-WI has a Command Injection via grep parameter in logs.py allows authenticated RCE (CVSS 7.5, roxy-wi)
- [CVE-2025-66417](https://cve.now/CVE-2025-66417.md): GLPI has an unauthenticated SQL injection through the inventory endpoint (CVSS 7.5, glpi-project glpi)
- [CVE-2025-66292](https://cve.now/CVE-2025-66292.md): DPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface (CVSS 8.1, donknap dpanel · github.com/donknap/dpanel)
- [CVE-2025-64516](https://cve.now/CVE-2025-64516.md): GLPI incorrectly authorizes access to documents (CVSS 7.5, glpi-project glpi)
- [CVE-2021-47843](https://cve.now/CVE-2021-47843.md): Tagstoo 2.0.1 - Stored XSS to RCE (CVSS 5.1, Tagstoo)
- [CVE-2021-47819](https://cve.now/CVE-2021-47819.md): ProjeQtOr Project Management 9.1.4 - Remote Code Execution (CVSS 9.3, ProjeQtOr Project Management)
- [CVE-2021-47799](https://cve.now/CVE-2021-47799.md): Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation (CVSS 8.5, Visual-Tools Visual Tools DVR VX16)
- [CVE-2021-47784](https://cve.now/CVE-2021-47784.md): Cyberfox Web Browser 52.9.1 - Denial of Service (PoC) (CVSS 6.7, Cyberfox Web Browser)
- [CVE-2021-47781](https://cve.now/CVE-2021-47781.md): Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC) (CVSS 6.7, Cmder Console Emulator)
- [CVE-2021-47777](https://cve.now/CVE-2021-47777.md): Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated) (CVSS 8.8, Ribccs Build Smart ERP)
- [CVE-2021-47776](https://cve.now/CVE-2021-47776.md): Umbraco v8.14.1 - 'baseUrl' SSRF (CVSS 6.9, Umbraco · UmbracoCms)
- [CVE-2021-47775](https://cve.now/CVE-2021-47775.md): YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH) (CVSS 8.4, Litexmedia YouTube Video Grabber)
- [CVE-2021-47774](https://cve.now/CVE-2021-47774.md): Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH) (CVSS 8.4, En Kingdia CD Extractor)
- [CVE-2021-47773](https://cve.now/CVE-2021-47773.md): Dynojet Power Core 2.3.0 - Unquoted Service Path (CVSS 8.5, Dynojet Power Core)
- [CVE-2021-47772](https://cve.now/CVE-2021-47772.md): 10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH) (CVSS 8.4, 10-Strike Strike Network Inventory Explorer Pro)
- [CVE-2021-47771](https://cve.now/CVE-2021-47771.md): RDP Manager 4.9.9.3 - Denial-of-Service (PoC) (CVSS 6.8, Cinspiration RDP Manager)
- [CVE-2021-47769](https://cve.now/CVE-2021-47769.md): Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS) (CVSS 5.1, Bdtask Isshue Shopping Cart)
- [CVE-2021-47768](https://cve.now/CVE-2021-47768.md): ImportExportTools NG 10.0.4 - HTML Injection (CVSS 5.3, thundernest ImportExportTools NG)
- [CVE-2021-47767](https://cve.now/CVE-2021-47767.md): 10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path (CVSS 8.5, 10-Strike Strike Network Inventory Explorer Pro)
- [CVE-2021-47766](https://cve.now/CVE-2021-47766.md): Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated) (CVSS 7.1, Levelprograms Kmaleon)
- [CVE-2021-47765](https://cve.now/CVE-2021-47765.md): AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC) (CVSS 6.7, Celestialsoftware AbsoluteTelnet)
- [CVE-2021-47764](https://cve.now/CVE-2021-47764.md): AbsoluteTelnet 11.24 - 'Phone' Denial of Service (PoC) (CVSS 6.7, Celestialsoftware AbsoluteTelnet)
- [CVE-2021-47763](https://cve.now/CVE-2021-47763.md): Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection (CVSS 8.8, Aimeos Laravel ecommerce platform · aimeos/aimeos-laravel)
- [CVE-2021-47762](https://cve.now/CVE-2021-47762.md): HTTPDebuggerPro 9.11 - Unquoted Service Path (CVSS 8.5, HTTPDebuggerPro)
- [CVE-2021-47761](https://cve.now/CVE-2021-47761.md): MilleGPG5 5.7.2 Luglio 2021 (x64) - Local Privilege Escalation (CVSS 8.5, MilleGPG5)
- [CVE-2021-47759](https://cve.now/CVE-2021-47759.md): MTPutty 1.0.1.21 - SSH Password Disclosure (CVSS 6.8, Ttyplus MTPutty)
- [CVE-2021-47758](https://cve.now/CVE-2021-47758.md): Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated) (CVSS 8.7, dharashah Chikitsa Patient Management System)
- [CVE-2021-47757](https://cve.now/CVE-2021-47757.md): Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated) (CVSS 8.7, dharashah Chikitsa Patient Management System)
- [CVE-2021-47755](https://cve.now/CVE-2021-47755.md): Oliver Library Server v5 - Arbitrary File Download (CVSS 8.7, Softlink Education Oliver Library Server)
- [CVE-2021-47754](https://cve.now/CVE-2021-47754.md): Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF) (CVSS 6.9, Arunna)
- [CVE-2021-47753](https://cve.now/CVE-2021-47753.md): phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated) (CVSS 9.3, phpKF CMS)
- [CVE-2021-47752](https://cve.now/CVE-2021-47752.md): AWebServer GhostBuilding 18 - Denial of Service (DoS) (CVSS 8.7, Sylkat-Tools AWebServer GhostBuilding)
- [CVE-2025-61973](https://cve.now/CVE-2025-61973.md): A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. (CVSS 8.8, Epic Games Store)
- [CVE-2026-0992](https://cve.now/CVE-2026-0992.md): Libxml2: libxml2: denial of service via crafted xml catalogs (CVSS 2.9, Red Hat Hardened Images · Red Hat Enterprise Linux +2)
- [CVE-2026-0989](https://cve.now/CVE-2026-0989.md): Libxml2: unbounded relaxng include recursion leading to stack overflow (CVSS 3.7, Red Hat Hardened Images · Red Hat Enterprise Linux +2)
- [CVE-2026-0990](https://cve.now/CVE-2026-0990.md): Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing (CVSS 5.9, Red Hat Hardened Images · Red Hat Enterprise Linux +2)
- [CVE-2026-0897](https://cve.now/CVE-2026-0897.md): Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata (CVSS 7.1, Google Keras · keras)
- [CVE-2025-13859](https://cve.now/CVE-2025-13859.md): AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber+) Missing Authorization to Stored Cross-Site Scripting via save\_customization\_settings (CVSS 6.4, wpcenter AffiliateX – Amazon Affiliate Plugin)
- [CVE-2025-13062](https://cve.now/CVE-2025-13062.md): Supreme Modules Lite \<= 2.5.62 - Authenticated (Author+) Arbitrary File Upload via JSON Upload Bypass (CVSS 8.8, divisupreme Supreme Modules Lite – Divi Theme, Extra Theme…)
- [CVE-2025-12895](https://cve.now/CVE-2025-12895.md): Kalium \<= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium\_vc\_contact\_form\_request (CVSS 5.3, Laborator Kalium 3 | Creative WordPress & WooCommerce Theme)
- [CVE-2026-22646](https://cve.now/CVE-2026-22646.md): Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attacke (CVSS 4.3, SICK AG Incoming Goods Suite)
- [CVE-2026-22645](https://cve.now/CVE-2026-22645.md): The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity (CVSS 5.3, SICK AG Incoming Goods Suite)
- [CVE-2026-22644](https://cve.now/CVE-2026-22644.md): Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, prox (CVSS 5.3, SICK AG Incoming Goods Suite)
- [CVE-2026-22919](https://cve.now/CVE-2026-22919.md): An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) att (CVSS 3.8, SICK AG TDC-X401GL)
- [CVE-2026-22918](https://cve.now/CVE-2026-22918.md): An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously cra (CVSS 4.3, SICK AG TDC-X401GL)
- [CVE-2026-22917](https://cve.now/CVE-2026-22917.md): Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service. (CVSS 4.3, SICK AG TDC-X401GL)
- [CVE-2026-22916](https://cve.now/CVE-2026-22916.md): An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions (CVSS 4.3, SICK AG TDC-X401GL)
- [CVE-2026-22915](https://cve.now/CVE-2026-22915.md): An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive informatio (CVSS 4.3, SICK AG TDC-X401GL)
- [CVE-2026-22914](https://cve.now/CVE-2026-22914.md): An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system man (CVSS 4.3, SICK AG TDC-X401GL)
- [CVE-2026-22913](https://cve.now/CVE-2026-22913.md): Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. (CVSS 4.3, SICK AG TDC-X401GL)
- [CVE-2026-22912](https://cve.now/CVE-2026-22912.md): Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. (CVSS 4.3, SICK AG TDC-X401GL)
- [CVE-2026-22911](https://cve.now/CVE-2026-22911.md): Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain un (CVSS 5.3, SICK AG TDC-X401GL)
- [CVE-2026-22910](https://cve.now/CVE-2026-22910.md): The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized ac (CVSS 7.5, SICK AG TDC-X401GL)
- [CVE-2026-22909](https://cve.now/CVE-2026-22909.md): Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, (CVSS 7.5, SICK AG TDC-X401GL)
- [CVE-2026-22908](https://cve.now/CVE-2026-22908.md): Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity (CVSS 9.1, SICK AG TDC-X401GL)
- [CVE-2026-22907](https://cve.now/CVE-2026-22907.md): An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data. (CVSS 9.9, SICK AG TDC-X401GL)
- [CVE-2026-0976](https://cve.now/CVE-2026-0976.md): Org.keycloak/keycloak-quarkus-server: keycloak: proxy bypass due to improper handling of matrix parameters in url paths (CVSS 3.7, Red Hat build of Keycloak · Red Hat JBoss Enterprise App… +1)
- [CVE-2025-14457](https://cve.now/CVE-2025-14457.md): Drag and Drop Multiple File Upload for Contact Form 7 \<= 1.3.9.2 - Missing Authorization to Unauthenticated File Deletion (CVSS 3.7, glenwpcoder Drag and Drop Multiple File Upload for Contact…)
- [CVE-2025-14448](https://cve.now/CVE-2025-14448.md): WP-Members Membership Plugin \<= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields (CVSS 5.4, cbutlerjr WP-Members Membership Plugin)
- [CVE-2024-48077](https://cve.now/CVE-2024-48077.md): NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource throttling. (CVSS 7.5)
- [CVE-2025-65349](https://cve.now/CVE-2025-65349.md): A Stored Cross-Site Scripting (XSS) vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRo (CVSS 5.4)
- [CVE-2025-65368](https://cve.now/CVE-2025-65368.md): SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output. (CVSS 6.1)
- [CVE-2025-67025](https://cve.now/CVE-2025-67025.md): Cross Site Scripting vulnerability in Anycomment anycomment.io 0.4.4 allows a remote attacker to execute arbitrary code via the Anycomment c (CVSS 6.1)
- [CVE-2025-67076](https://cve.now/CVE-2025-67076.md): Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via (CVSS 7.5)
- [CVE-2025-67077](https://cve.now/CVE-2025-67077.md): File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via (CVSS 8.8)
- [CVE-2025-67078](https://cve.now/CVE-2025-67078.md): Cross site scripting (XSS) vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute arbitrary code via the notify (CVSS 6.1)
- [CVE-2025-67079](https://cve.now/CVE-2025-67079.md): File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick l (CVSS 9.8)
- [CVE-2025-67081](https://cve.now/CVE-2025-67081.md): An SQL injection vulnerability in Itflow through 25.06 has been identified in the "role\_id" parameter when editing a profile. (CVSS 4.9)
- [CVE-2025-67082](https://cve.now/CVE-2025-67082.md): An SQL injection vulnerability in InvoicePlane through 1.6.3 has been identified in "maxQuantity" and "minQuantity" parameters when generati (CVSS 6.5)
- [CVE-2025-67083](https://cve.now/CVE-2025-67083.md): Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the server. (CVSS 5.3)
- [CVE-2025-67084](https://cve.now/CVE-2025-67084.md): File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which (CVSS 9.9)
- [CVE-2025-67246](https://cve.now/CVE-2025-67246.md): A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler (CVSS 7.3)
- [CVE-2025-67822](https://cve.now/CVE-2025-67822.md): A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 (7.3.0.0.50) through 7.8 SP1 (7.8.1.0.14) could allow an u (CVSS 9.4)
- [CVE-2025-67823](https://cve.now/CVE-2025-67823.md): A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could al (CVSS 8.2)
- [CVE-2025-70298](https://cve.now/CVE-2025-70298.md): GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx\_parse\_tags function. (CVSS 8.2)
- [CVE-2025-70299](https://cve.now/CVE-2025-70299.md): A heap overflow in the avi\_parse\_input\_file() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted AVI (CVSS 6.5)
- [CVE-2025-70302](https://cve.now/CVE-2025-70302.md): A heap overflow in the ghi\_dmx\_declare\_opid\_bin() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted (CVSS 5.5)
- [CVE-2025-70303](https://cve.now/CVE-2025-70303.md): A heap overflow in the uncv\_parse\_config() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 fil (CVSS 5.5)
- [CVE-2025-70304](https://cve.now/CVE-2025-70304.md): A buffer overflow in the vobsub\_get\_subpic\_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a craf (CVSS 7.5)
- [CVE-2025-70305](https://cve.now/CVE-2025-70305.md): A stack overflow in the dmx\_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .saf file. (CVSS 5.5)
- [CVE-2025-70307](https://cve.now/CVE-2025-70307.md): A stack overflow in the dump\_ttxt\_sample function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet. (CVSS 7.5)
- [CVE-2025-70308](https://cve.now/CVE-2025-70308.md): An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted . (CVSS 7.5)
- [CVE-2025-70309](https://cve.now/CVE-2025-70309.md): A stack overflow in the pcmreframe\_flush\_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WA (CVSS 5.5)
- [CVE-2025-70310](https://cve.now/CVE-2025-70310.md): A heap overflow in the vorbis\_to\_intern() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .ogg fil (CVSS 5.5)
- [CVE-2025-70656](https://cve.now/CVE-2025-70656.md): Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the mac parameter of the sub\_65B5C function. (CVSS 7.5)
- [CVE-2025-70744](https://cve.now/CVE-2025-70744.md): Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the sub\_65B5C function. (CVSS 7.5)
- [CVE-2025-70890](https://cve.now/CVE-2025-70890.md): A stored cross-site scripting (XSS) vulnerability exists in Cyber Cafe Management System v1.0. (CVSS 6.1)
- [CVE-2025-70891](https://cve.now/CVE-2025-70891.md): A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. (CVSS 6.1)
- [CVE-2025-70892](https://cve.now/CVE-2025-70892.md): Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user management module. (CVSS 9.8)
- [CVE-2025-70893](https://cve.now/CVE-2025-70893.md): A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. (CVSS 8.8)
- [CVE-2025-71019](https://cve.now/CVE-2025-71019.md): Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the sub\_65B5C function. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-01-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.