4.8

CVSS4.0

CVE-2026-1110 - cijliu librtsp rtsp_parse_method buffer overflow

A flaw has been found in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. This affects the function rtsp_parse_method. This manipulation causes buffer overflow. It is possible to launch the attack on the local host. Continious delivery with rolling releases is used by this product. Th…

πŸ“… Published: Jan. 18, 2026, 4:32 a.m. πŸ”„ Last Modified: Jan. 21, 2026, 6:53 p.m.

4.8

CVSS4.0

CVE-2026-1109 - cijliu librtsp rtsp_parse_request buffer overflow

A vulnerability was detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The impacted element is the function rtsp_parse_request. The manipulation results in buffer overflow. Attacking locally is a requirement. This product takes the approach of rolling releases to provide con…

πŸ“… Published: Jan. 18, 2026, 3:02 a.m. πŸ”„ Last Modified: Jan. 20, 2026, 5:10 p.m.

4.8

CVSS4.0

CVE-2026-1108 - cijliu librtsp rtsp_rely_dumps buffer overflow

A security vulnerability has been detected in cijliu librtsp up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04. The affected element is the function rtsp_rely_dumps. The manipulation leads to buffer overflow. An attack has to be approached locally. This product is using a rolling release to provide co…

πŸ“… Published: Jan. 18, 2026, 1:32 a.m. πŸ”„ Last Modified: Jan. 20, 2026, 5:11 p.m.

5.3

CVSS4.0

CVE-2026-1107 - EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check_userinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit …

πŸ“… Published: Jan. 18, 2026, 12:32 a.m. πŸ”„ Last Modified: Jan. 20, 2026, 5:20 p.m.

5.3

CVSS4.0

CVE-2026-1106 - Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization. T…

πŸ“… Published: Jan. 18, 2026, 12:02 a.m. πŸ”„ Last Modified: Jan. 20, 2026, 5:21 p.m.

6.9

CVSS4.0

CVE-2026-1105 - EasyCMS UserAction.class.php sql injection

A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of the argument _order leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was c…

πŸ“… Published: Jan. 17, 2026, 11:32 p.m. πŸ”„ Last Modified: Jan. 26, 2026, 3:05 p.m.

5.3

CVSS4.0

CVE-2026-1066 - kalcaddle kodbox Compression zip command injection

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be …

πŸ“… Published: Jan. 17, 2026, 9:02 p.m. πŸ”„ Last Modified: Jan. 26, 2026, 3:05 p.m.

5.1

CVSS4.0

CVE-2026-1064 - bastillion-io Bastillion System Management SystemKtrl.java command injection

A vulnerability was found in bastillion-io Bastillion up to 4.0.1. This issue affects some unknown processing of the file src/main/java/io/bastillion/manage/control/SystemKtrl.java of the component System Management Module. Performing a manipulation results in command injection. The attack can be i…

πŸ“… Published: Jan. 17, 2026, 8:32 p.m. πŸ”„ Last Modified: Jan. 26, 2026, 3:05 p.m.

5.1

CVSS4.0

CVE-2026-1063 - bastillion-io Bastillion Public Key Management System AuthKeysKtrl.java command injection

A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the file src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java of the component Public Key Management System. Such manipulation leads to command injection. It is possible to lau…

πŸ“… Published: Jan. 17, 2026, 8:02 p.m. πŸ”„ Last Modified: Jan. 26, 2026, 3:05 p.m.

5.3

CVSS4.0

CVE-2026-1062 - xiweicheng TMS HtmlUtil.java summary server-side request forgery

A flaw has been found in xiweicheng TMS up to 2.28.0. This affects the function Summary of the file src/main/java/com/lhjz/portal/util/HtmlUtil.java. This manipulation of the argument url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been publis…

πŸ“… Published: Jan. 17, 2026, 7:32 p.m. πŸ”„ Last Modified: Jan. 26, 2026, 3:05 p.m.
Total resulsts: 331165
Page 295 of 33,117
Β« previous page Β» next page
Filters