Skip to content
OpenAdvisories

Archive

22 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /22 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-24332 Public exploit

    Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actua…

    Discord WebSocket API service
  • Medium 6.3
    CVE-2026-24055 Public exploit

    Langfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project Linking

    Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId i…

    langfuse langfuse
  • Medium 6.5
    CVE-2025-69612 Public exploit

    A path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818) from TMS Global Software…

  • Medium 6.5
    CVE-2025-70899 Public exploit

    PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative for…