Skip to content
OpenAdvisories

Archive

14 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /14 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.2
    CVE-2025-14058

    A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized u…

    Lenovo Idea Tab Pro (TB373FU) Yoga Tab Plus (TB520FU) Tab M10 5G (TB360ZU)
  • Low 1.3
    CVE-2026-23497

    Frappe LMS has a Stored XSS via Unsanitized Image Filename in Course and Jobs Pages

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In 2.44.0 and earlier, there is a stored XSS vulnerability where a specially crafted image filename could execute malicious JavaScript when rendered on cour…

    Frappe Technologies lms
  • Low 2.3
    CVE-2026-21889

    Weblate leaks information via screenshots

    Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerab…

    WeblateOrg weblate weblate PyPI