Skip to content
OpenAdvisories

Archive

3 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /3 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-3660

    Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpoint

    Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/de…

    Petlibrio Smart Pet Feeder Platform
  • Medium 5.3
    CVE-2025-3654

    Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpoint

    Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware information by exploiting insecure API endpoints. Attackers can retrieve device serial numbers and MAC…

    Petlibrio Smart Pet Feeder Platform
  • Medium 5.3
    CVE-2025-3652

    Petlibro Smart Pet Feeder Platform through 1.7.31 Audio Information Disclosure via API endpoint

    Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to private audio recordings by exploiting sequential audio IDs and insecure assignment endpoints. Attackers can send requ…

    Petlibrio Smart Pet Feeder Platform
  • Medium 6.5
    CVE-2025-15115

    Petlibro Smart Pet Feeder Platform through 1.7.31 Authentication Bypass via API endpoint

    Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any user account by exploiting OAuth token validation flaws in the social login system. Attackers can send…

    Petlibrio Smart Pet Feeder Platform
  • Medium 6.9
    CVE-2025-34171 Public exploit

    CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure

    CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information. The /v1/users/image endpoint can be abused with a user-controlled path par…

    IceWhale Tech CasaOS
  • Medium 5.3
    CVE-2026-21484 Scanner template

    AnythingLLM Vulnerable to Username Enumeration w/ Password Recovery

    AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different error messages depending on …

    Mintplex-Labs anything-llm