Skip to content
OpenAdvisories

Archive

20 January 2026

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Low 3.1

    Vulnerability in the Oracle Zero Data Loss Recovery Appliance Software product of Oracle Zero Data Loss Recovery Applia…

  • Low 2.7

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that …

  • Low 3.1

    Vulnerability in Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u471-b50…

  • Low 2.3

    Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems). The supported…

  • Low 2.7

    HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver sett…

  • Low 2.8

    A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` e…

  • Low 3.5

    Multiple vulnerabilities found in IBM ApplinX.

    IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

  • Low 3.1

    Multiple vulnerabilities found in IBM ApplinX.

    IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security.

  • Low 3.1

    MineAdmin downloadById information disclosure

    A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotel…

  • Low 3.1

    MineAdmin getFileInfoById information disclosure

    A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attac…