Skip to content
OpenAdvisories

Archive

4 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /4 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-15443

    CRMEB product_export sql injection

    A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/product/product_export. Such manipulation of the argument cate_id leads to sql injection. The attack may be launched remotely. The exploit is…

  • Medium 4.7
    CVE-2025-15442

    CRMEB product_list sql injection

    A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/export/product_list. This manipulation of the argument cate_id causes sql injection. The attack may be initiated remotely. The exploit has been …

  • Medium 6.3
    CVE-2026-0577

    code-projects Online Product Reservation System prod.php unrestricted upload

    A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible t…

    code-projects Online Product Reservation System
  • Medium 4.9
    CVE-2025-14830

    JFrog Artifactory Cross-Site Scripting

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JFrog Artifactory (Workers) allows Cross-Site Scripting (XSS).This issue affects Artifactory (Workers): from >=7.94.0 through <7.117.10.

    jfrog Artifactory (Workers)
  • Medium 6.3
    CVE-2026-0574

    yeqifu warehouse Request UserController.java saveUserRole improper authorization

    A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This …

    yeqifu warehouse