CVEs published January 30, 2026
121 CVEs were published on January 30, 2026: 13 critical, 48 high.
- Published
- 121
- Critical
- 13
- High
- 48
- Medium
- 57
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 47
Most affected products
- IBM Db2 for Linux, UNIX and Windows
- 18
- HIKSEMI HS-AFS-S1H1
- 4
- Free5GC SMF
- 3
- Tenda HG10
- 3
- Arcadia Technology Crafty Controller
- 2
- backstage · @backstage/plugin-techdocs-node
- 2
- ChurchCRM CRM
- 2
- Code::Blocks
- 2
- Filigran OpenCTI · pycti
- 2
- Internet Information Co. DreamMaker
- 2
Critical 13
- CVE-2020-37052AirControl 1.4.2 - PreAuth Remote Code ExecutionUbiquiti AirControl
- CVE-2020-37027Sickbeard 0.1 - Remote Command Injectionmidgetspy Sickbeard
- CVE-2026-1723TOTOLINK X6000R Unauthenticated Command Injection VulnerabilityTOTOLINK X6000R
- CVE-2026-25141Orval has a code injection via unsanitized x-enum-descriptions uing JS commentsorval-labs orval · @orval/core
- CVE-2026-25130Cybersecurity AI vulnerable to command Injection through argument injection in find_file Agent toolaliasrobotics cai · cai-framework
- CVE-2025-24293# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe imageRails activestorage · activestorage
- CVE-2025-7964Zigbee Router Denial of Servicesilabs.com Silicon Labs Zigbee Stack
- CVE-2025-26385Metasys product command injection vulnerability could allow remote SQL executionJohnson Controls Metasys
- CVE-2026-1699In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while chEclipse Foundation Eclipse Theia - Website
- CVE-2026-0963Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty ControllerArcadia Technology Crafty Controller
- CVE-2026-24729Interinfo DreamMaker - Unrestricted Upload of File with Dangerous TypeInternet Information Co. DreamMaker
- CVE-2026-24728Interinfo DreamMaker - Missing Authentication for Critical FunctionInternet Information Co. DreamMaker
- CVE-2025-51958aelsantex runcommand 2014-04-01, a plugin for DokuWiki, allows unauthenticated attackers to execute arbitrary system commands via lib/plugin
High 48
- CVE-2026-25156HotCRP vulnerable to stored XSS via comment attachmentskohler hotcrp
- CVE-2020-37057Online-Exam-System 2015 - 'fid' SQL Injectionsunnygkp10 Online-Exam-System
- CVE-2020-37053Navigate CMS 2.8.7 - ''sidx' SQL InjectionNaviwebs S.C. Navigate CMS
- CVE-2020-37051Online-Exam-System 2015 - 'feedback' SQL Injectionsunnygkp10 Online-Exam-System
- CVE-2020-37050Quick Player 1.3 - '.m3l' Buffer OverflowM.J.M Soft Quick Player
- CVE-2020-37049Frigate 3.36.0.9 - 'Command Line' Local Buffer OverflowWinFrigate Frigate 3 Professional
- CVE-2020-3704310-Strike Bandwidth Monitor 3.9 - Buffer Overflow10-Strike Software Bandwidth Monitor
- CVE-2020-37042Frigate Professional 3.36.0.9 - 'Find Computer' Local Buffer OverflowWinFrigate Frigate 3 Professional
- CVE-2020-37041OpenCTI 3.3.1 - Directory TraversalFiligran OpenCTI · pycti
- CVE-2020-37040Code Blocks 17.12 - 'File Name' Local Buffer OverflowCode::Blocks
- CVE-2020-37036RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer OverflowMini-stream Software RM Downloader
- CVE-2020-37035e-learning Php Script 0.1.0 - 'search' SQL Injectionamitkolloldey e-learning PHP Script
- CVE-2020-37034HelloWeb 2.0 - Arbitrary File DownloadHelloWeb
- CVE-2020-37033Infor Storefront B2B 1.0 - 'usr_name' SQL InjectionInsite Software Infor Storefront B2B
- CVE-2020-37032Wing FTP Server 6.3.8 - Remote Code ExecutionWing FTP Server
- CVE-2020-37031Simple Startup Manager 1.17 - 'File' Local Buffer OverflowAshkon Software Simple Startup Manager
- CVE-2020-37029FTPDummy 4.80 - Local Buffer OverflowK.soft FTPDummy
- CVE-2020-37028Socusoft Photo to Video Converter Professional 8.07 - 'Output Folder' Buffer OverflowSOCUSOFT Photo to Video Converter Professional
- CVE-2020-37025Port Forwarding Wizard 4.8.0 - Buffer OverflowiForwarder and upRedSun Technologies, LLC. Port Forwarding…
- CVE-2020-37024Nidesoft DVD Ripper 5.2.18 - Local Buffer OverflowNidesoft Studio Nidesoft DVD Ripper
- CVE-2020-37023Koken CMS 0.22.24 - Arbitrary File UploadKoken CMS
- CVE-2019-25232NetPCLinker 1.0.0.0 - Buffer OverflowNetPCLinker
- CVE-2026-25153@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooksbackstage · @backstage/plugin-techdocs-node
- CVE-2025-36184IBM Db2 Privilege EscalationIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36384IBM Db2 Privilege EscalationIBM Db2 for Linux, UNIX and Windows
- CVE-2025-11175DiscussionTools should use better regexThe Wikimedia Foundation Mediawiki - DiscussionTools Extens…
- CVE-2025-62348Salt junos module uses an unsafe YAML loader which may allow unintended code executionSalt Project Salt · salt
- CVE-2020-37060Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service PathDrive-Software Atomic Alarm Clock x86
- CVE-2020-37059Popcorn Time 6.2 - 'Update service' Unquoted Service PathGetpopcorntime Popcorn Time
- CVE-2020-37058Andrea ST Filters Service 1.0.64.7 - Unquoted service pathAndrea Electronics Andrea ST Filters Service
- CVE-2020-37030Outline Service 1.3.3 - 'Outline Service ' Unquoted Service PathGetoutline Outline Service
- CVE-2025-4686Time-Based Blind SQLi in Kodmatic Computer's Online Exam and AssessmentKodmatic Computer Software Tourism Construction Industry an…
- CVE-2026-25128fast-xml-parser has RangeError DoS Numeric Entities BugNaturalIntelligence fast-xml-parser · fast-xml-parser
- CVE-2026-24855ChurchCRM has Stored Cross-Site Scripting (XSS) in Create Events in Church Calendar, Leading to Account TakeoverChurchCRM CRM
- CVE-2026-24854Church CRM has SQL injection in PaddleNumEditor.phpChurchCRM CRM
- CVE-2026-1686Totolink A3600R app.so setAppEasyWizardConfig buffer overflowTotolink A3600R
- CVE-2024-4027Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacksRed Hat build of Apicurio Registry · Red Hat build of Qu… +7
- CVE-2026-1498WatchGuard Firebox LDAP InjectionWatchGuard Fireware OS
- CVE-2025-13176Local privilege escalation in ESET Inspect Connector for WindowsESET, spol. s.r.o ESET Inspect Connector
- CVE-2026-22623Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary cHIKSEMI HS-AFS-S1H1
- CVE-2026-0709Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation.Hikvision DS-3WAP521-SI · Hikvision DS-3WAP522-SI +4
- CVE-2026-21418Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command InjectiDell Unity
- CVE-2025-1395Sensitive Data Exposure in CoDeriApp's HeyGarsonCodriapp Innovation and Software Technologies HeyGarson
- CVE-2026-22277Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command InjectDell UnityVSA
- CVE-2026-0805Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty ControllerArcadia Technology Crafty Controller
- CVE-2026-1680Local Privilege Escalation in Local Admin ServiceEdgemo (Danoffice IT) Local Admin Service
- CVE-2026-24714Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the boxNETGEAR products
- CVE-2025-69662SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function begeopandas
Medium, low and unrated 60
- CVE-2020-37056Crystal Shard http-protection 0.2.0 - IP Spoofing BypassCrystal Shard http-protection
- CVE-2020-37054Navigate CMS 2.8.7 - Cross-Site Request ForgeryNaviwebs S.C. Navigate CMS
- CVE-2020-37046Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request ForgeryAdikiss Sistem Informasi Pengumuman Kelulusan Online
- CVE-2020-37044OpenCTI 3.3.1 - Cross Site ScriptingFiligran OpenCTI · pycti
- CVE-2020-37039Frigate 2.02 - Denial Of ServiceWinFrigate Frigate
- CVE-2020-37038Code Blocks 20.03 - Denial Of ServiceCode::Blocks
- CVE-2020-37026Sickbeard 0.1 - Cross-Site Request Forgerymidgetspy Sickbeard
- CVE-2026-25154LocalSend has Stored XSS in Web Share Interface via Filenamelocalsend
- CVE-2026-25152@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generatorbackstage · @backstage/plugin-techdocs-node
- CVE-2026-1705D-Link DSL-6641K Web ad_virtual_server_vdsl cross site scriptingD-Link DSL-6641K
- CVE-2025-2668IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36001IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36009IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36070IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36098IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36123IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36353IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36365IBM Db2 Privilege EscalationIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36366IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36387IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36407IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36423IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36424IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36427IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36428IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-36442IBM Db2 Denial of ServiceIBM Db2 for Linux, UNIX and Windows
- CVE-2026-25129PsySH has Local Privilege Escalation via CWD .psysh.php auto-loadbobthecow psysh · psy/psysh
- CVE-2026-23835LobeHub Vulnerable to Improper Authorization in Presigned Uploadlobehub lobe-chat · @lobehub/chat
- CVE-2025-62349Salt Master authentication protocol downgrade may enable minion impersonationSalt Project Salt · salt
- CVE-2024-9432Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica.OpenText™ Vertica
- CVE-2025-15497Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resultinOpenVPN
- CVE-2026-1702SourceCodester Pet Grooming Management Software User Management user.php improper authorizationSourceCodester Pet Grooming Management Software
- CVE-2026-1701itsourcecode School Management System index.php sql injectionitsourcecode School Management System
- CVE-2026-1700projectworlds House Rental and Property Listing sms.php cross site scriptingprojectworlds House Rental and Property Listing
- CVE-2026-1691bolo-solo SnakeYAML BackupService.java importMarkdownsSync deserializationbolo-solo
- CVE-2026-1690Tenda HG10 formSysCmd system command injectionTenda HG10
- CVE-2026-1689Tenda HG10 Login formLogin checkUserFromLanOrWan command injectionTenda HG10
- CVE-2020-37022OpenZ ERP 3.6.60 - Persistent Cross-Site ScriptingOpenZ ERP
- CVE-2020-37019Orchard Core RC1 - Persistent Cross-Site ScriptingOrchardcore Orchard Core
- CVE-2020-37014Tryton 5.4 - Persistent Cross-Site ScriptingTryton
- CVE-2020-37003Sellacious eCommerce 4.6 - Persistent Cross-Site ScriptingSellacious eCommerce
- CVE-2020-36998forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scriptingforma E-Learning Suite
- CVE-2020-36996PHPFusion 9.03.50 - Persistent Cross-Site ScriptingPhp-Fusion PHPFusion
- CVE-2020-36966Dolibarr 11.0.3 - 'ldap.php' - Persistent Cross-Site ScriptingDolibarr
- CVE-2026-1688itsourcecode Directory Management System index.php sql injectionitsourcecode Directory Management System
- CVE-2026-1687Tenda HG10 Boa Webserver formSamba command injectionTenda HG10
- CVE-2026-25050Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategyvendurehq vendure · @vendure/core
- CVE-2026-1685D-Link DIR-823X Login sub_40AC74 excessive authenticationD-Link DIR-823X
- CVE-2026-1684Free5GC SMF PFCP UDP Endpoint pfcp_reports.go HandleReports denial of serviceFree5GC SMF
- CVE-2025-6723Untrusted user data can lead to privilege escalationProgress Software Chef Inspec
- CVE-2026-1683Free5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of serviceFree5GC SMF
- CVE-2026-1682Free5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereferenceFree5GC SMF
- CVE-2025-9226Stored XSSZohocorp ManageEngine OpManager · Zohocorp ManageEngine… +1
- CVE-2026-22626Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal deviHIKSEMI HS-AFS-S1H1
- CVE-2026-22625Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files.HIKSEMI HS-AFS-S1H1
- CVE-2026-22624Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proHIKSEMI HS-AFS-S1H1
- CVE-2026-25211Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.llamastack Llama Stack · llama-stack
- CVE-2026-25210In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow chlibexpat project libexpat
- CVE-2025-12899net: icmp: Out of bound memory readzephyrproject-rtos Zephyr
- CVE-2025-15322Tanium addressed an improper access controls vulnerability in Tanium Server.Tanium Server