Skip to content
OpenAdvisories

Archive

10 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /10 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-0824

    questdb ui Web Console cross site scripting

    A security flaw has been discovered in questdb ui up to 1.11.9. Impacted is an unknown function of the component Web Console. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public an…

    questdb ui @questdb/web-console npm
  • Low 3.3
    CVE-2025-15504

    lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference

    A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parse_binary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The att…

    lief-project LIEF lief lief PyPI crates.io
  • Low 3.1
    CVE-2025-53470

    Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver

    Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memory read in H4 driver. This issue affects Apache NimBLE: through 1.8.  This issue requires a broken or bogus Bluetooth controller and thus se…

    Apache Software Foundation Apache Mynewt NimBLE
  • Low 3.7
    CVE-2026-22611

    AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value

    AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. From versions 4.0.0 to before 4.0.3.3, Customer applications could be configured to improperly route AWS API calls to n…

    AWS aws-sdk-net AWSSDK.Core NuGet
  • Low 2.7
    CVE-2026-22691

    pypdf has possible long runtimes for malformed startxref

    pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entr…

    py-pdf pypdf pypdf pypdf Debian Ubuntu PyPI
  • Low 2.7
    CVE-2026-22690

    pypdf has possible long runtimes for missing /Root object with large /Size values

    pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for missing /Root object with large /Size values. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes f…

    py-pdf pypdf pypdf pypdf Debian Ubuntu PyPI
  • Low 3.5
    CVE-2026-22602

    OpenProject is Vulnerable to User Enumeration via User ID

    OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, a low‑privileged logged-in user can view the full names of other users. Since user IDs are assigned sequentially and predictably (e.g., 1 to 1000), an attacker can …

    opf openproject