Common Vulnerabilities and Exposures (CVE)

CVE-2026-1145

Jan 19, 2026 08:02:08 UTC

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function js_typed_array_constructor_ta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be ...

CVE-2026-1144

Jan 19, 2026 07:32:10 UTC

A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. Th...

CVE-2025-6035

Jan 19, 2026 07:23:07 UTC

A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel (img_bpp), which can resul...

CVE-2026-1143

Jan 19, 2026 07:02:08 UTC

A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack m...

CVE-2025-15539

Jan 19, 2026 06:45:07 UTC

A vulnerability was determined in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_downlink_data_notification_ack of the file src/sgwc/s11-handler.c of the component sgwc. This manipulation causes denial of service. The attack ...

CVE-2026-1142

Jan 19, 2026 06:32:07 UTC

A security flaw has been discovered in PHPGurukul News Portal 1.0. The impacted element is an unknown function. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been rele...

CVE-2026-1141

Jan 19, 2026 06:02:07 UTC

A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attac...

CVE-2026-1140

Jan 19, 2026 05:32:05 UTC

A vulnerability was found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/ConfigExceptAli. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2026-1139

Jan 19, 2026 05:02:06 UTC

A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/ConfigExceptMSN. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The e...

CVE-2026-1138

Jan 19, 2026 04:32:06 UTC

A flaw has been found in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/ConfigExceptQQ. Executing a manipulation can lead to buffer overflow. The attack may be performed from remote. The exploit has been publ...

CVE-2026-1137

Jan 19, 2026 04:02:08 UTC

A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /goform/formWebAuthGlobalConfig. Performing a manipulation results in buffer overflow. The attack is possible to be carried ...

CVE-2025-46397

Jan 19, 2026 03:55:40 UTC

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.

CVE-2024-7885

Jan 19, 2026 03:51:37 UTC

A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP c...

CVE-2026-1136

Jan 19, 2026 03:32:05 UTC

A weakness has been identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. Affected is the function Save of the file /blog/bContent/save of the component ContentController. This manipulation of the argument content/aut...

CVE-2026-1135

Jan 19, 2026 03:02:06 UTC

A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be l...