Skip to content
OpenAdvisories

Archive

24 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /24 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-13374 Public exploit

    Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action

    The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the kalrav_upload_file AJAX action in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to upl…

    irisideatechsolutions Kalrav AI Agent Web / CMS
  • Critical 9.8
    CVE-2025-13952

    GPU DDK - libusc UAF via WebGPU shaders at MergeConsecutiveBarriersBP

    A web page that contains unusual GPU shader code is loaded from the Internet into the GPU compiler process triggers a write use-after-free crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this cou…

    Imagination Technologies Graphics DDK
  • Critical 9.8
    CVE-2026-22583

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketin…

    Salesforce Marketing Cloud Engagement
  • Critical 9.8
    CVE-2026-22582

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketin…

    Salesforce Marketing Cloud Engagement
  • Critical 9.8
    CVE-2026-22586

    Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, P…

    Salesforce Marketing Cloud Engagement
  • Critical 9.8
    CVE-2026-22585

    Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Fo…

    Salesforce Marketing Cloud Engagement
  • Critical 9.3
    CVE-2026-24399

    ChatterMate has Stored Cross-Site Scripting (XSS) via Chatbot Input Execution

    ChatterMate is a no-code AI chatbot agent framework. In versions 1.0.8 and below, the chatbot accepts and executes malicious HTML/JavaScript payloads when supplied as chat input. Specifically, an <iframe> payload containing a javascript: URI can be processed …

    chattermate chattermate.chat