Skip to content
OpenAdvisories

Archive

16 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /16 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-31186

    A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able t…

    Apple Xcode
  • Low 3.3
    CVE-2025-24090

    A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app…

    Apple iOS and iPadOS iOS
  • Low 3.3
    CVE-2024-44210

    This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be a…

    Apple macOS macOS
  • Low 2.4
    CVE-2024-54556

    This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may…

    Apple iOS and iPadOS iOS
  • Low 2.9
    CVE-2026-22782

    RustFS RPC signature verification logs shared secret

    RustFS is a distributed object storage system built in Rust. From >= 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signatures cause the server to log the shared HMAC secret (and expected signature), which exposes the secret to log readers and enables forged RP…

    rustfs rustfs rustfs crates.io
  • Low 3.1
    CVE-2025-14822

    DoS from quadratic complexity in model.ParseHashtags

    Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP request containing a post with thousands space-separated tokens

    Mattermost Mattermost github.com/mattermost/mattermost-server Go
  • Low 2.6
    CVE-2025-61873

    Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV expo…

    Best Practical Request Tracker request-tracker4 request-tracker4 Debian Ubuntu