Skip to content
OpenAdvisories

Archive

3 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /3 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2025-3653

    Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpoint

    Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by accepting arbitrary serial numbers without ownership verification. Attackers can control any device by s…

    Petlibrio Smart Pet Feeder Platform
  • High 7.3
    CVE-2025-3646

    Petlibro Smart Pet Feeder Platform through 1.7.31 Authorization Bypass via Device Share API

    Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerability that allows unauthorized users to add users as shared owners to any device by exploiting missing permission checks. Attackers can send requests to the devi…

    Petlibrio Smart Pet Feeder Platform
  • High 8.7
    CVE-2025-64124

    Nuvation Energy Multi-Stack Controller OS Command Injection

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.

    Nuvation Energy Multi-Stack Controller (MSC)