Skip to content
OpenAdvisories

Archive

22 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /22 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

166 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-27377

    Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks

    Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle (MITM) attack could exploit this issue to intercept or manipulate network traffic, potentially exposi…

    Altium Altium Designer
  • Medium 6.8
    CVE-2026-23946

    Tendenci has Authenticated Remote Code Execution via Pickle Deserialization

    Tendenci is an open source content management system built for non-profits, associations and cause-based sites. Versions 15.3.11 and below include a critical deserialization vulnerability in the Helpdesk module (which is not enabled by default). This vulnerab…

    tendenci tendenci tendenci PyPI
  • Medium 6.8
    CVE-2026-23893

    openCryptoki has improper link resolution before file access (link following)

    openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by plan…

    opencryptoki opencryptoki opencryptoki opencryptoki Debian Ubuntu Azure Linux
  • Medium 6.0
    CVE-2025-69820

    Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensitive information via …

  • Medium 6.5
    CVE-2025-69612 Public exploit

    A path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818) from TMS Global Software…

  • Medium 6.5
    CVE-2025-70899 Public exploit

    PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative for…