Skip to content
OpenAdvisories

Archive

5 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /5 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-68428 Public exploit

    jsPDF has Local File Inclusion/Path Traversal vulnerability

    jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsanitized paths to the loa…

    parallax jsPDF opensearch-dashboards-3-dashboards-reporting opensearch-dashboards-3-dashboards-observability Wolfi npm
  • Critical 9.4
    CVE-2025-64424 Public exploit

    Colify has command injection vulnerability in project git source

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a command injection vulnerability exists in the git source input fields of a resource, allowing a low …

    coollabsio coolify
  • High 8.6
    CVE-2025-14124 Public exploit Scanner template

    Team < 5.0.11 - Unauthenticated SQLi

    The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

    Web / CMS
  • High 7.5
    CVE-2025-67303 Public exploit Scanner template

    ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

    An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web…

    comfyui-manager PyPI