Archive
6 January 2026
Vulnerabilities first published on this day (UTC), newest first.
185 results · Feed
-
Medium 6.7
In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privi…
-
High 7.0
In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privil…
-
High 7.8
In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
High 7.8
In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege …
-
High 7.8
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
High 7.8
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
High 7.8
In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalatio…
-
Medium 6.5
In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote d…
-
Medium 6.5
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service…
-
Medium 6.5
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service…
-
Medium 6.5
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service…
-
Medium 6.5
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of servic…
-
High 7.8
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Critical 9.8
iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Use After Free vulnerability in the CIccXform::Create() function, where it deletes the hint. This issue is fixed in version 2.3.1.1.
-
Critical 9.8
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authenticatio…
-
Low 3.3
iccDEV has a Memory Leak in its CIccProfileXml::ParseTag() Error Path
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). This issue is fixed in version 2.3.1.1.
-
High 7.8
iccDEV has Integer Overflow/Underflow in CIccXmlArrayType::ParseTextCountNum()
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have overflows and underflows in CIccXmlArrayType::ParseTextCountNum(). This vulnerability affects users of the iccDEV library who process IC…
-
Medium 6.5
Pterodactyl TOTPs can be reused during validity window
Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below allow TOTP to be used multiple times during its validity window. Users with 2FA enabled are prompted to enter a token during sign-in, and afterward it is not sufficien…
-
High 7.5
Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced
Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below do not revoke active SFTP connections when a user is removed from a server instance or has their permissions changes with respect to file access over SFTP. This allows…
-
Critical 9.8
Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium
Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium <= 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://www.cve.org…
-
High 7.5
iccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below have an infinite loop in the IccProfile.cpp function, CalcProfileID. This issue is fixed in version 2.3.1.1.
-
High 7.5
DwyerOmega Isensix Advanced Remote Monitoring System (ARMS) 1.5.7 allows an attacker to retrieve sensitive information …
-
Critical 9.8
An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a m…
-
Critical 9.8
Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selecti…
-
Critical 9.8
An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the de…