Skip to content
OpenAdvisories

Archive

29 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /29 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-25047 Public exploit

    deepHas vulnerable to Prototype Pollution via constructor.prototype

    deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was f…

    sharpred deepHas deephas npm
  • Critical 9.8
    CVE-2026-1340 Exploited Public exploit Scanner template EPSS 99%

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    ivanti Endpoint Manager Mobile Network devices
    KEV Apr 8, 2026
  • Critical 9.8
    CVE-2026-1281 Exploited Public exploit Scanner template EPSS 99%

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    ivanti Endpoint Manager Mobile Network devices
    KEV Jan 29, 2026
  • Critical 9.1
    CVE-2026-22806

    vCluster Platform's Access Keys Allows Access Beyond Scope

    vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing. Prior to versions 4.6.0, 4.5.4, 4.4.2, and 4.3.10, when an access key is created with a limited scope, the scope can be bypassed to access reso…

    loft-sh loft
  • Critical 9.8
    CVE-2026-1453

    Missing Authentication for Critical Function in KiloView Encoder Series

    A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.

    Kiloview Encoder Series P2 hardware Version 1.8.20 Encoder Series E1 hardware Version 1.4 Encoder Series RE1 hardware Version 3.0.00
  • Critical 9.8
    CVE-2020-37012

    Tea LaTex 1.0 - Remote Code Execution

    Tea LaTex 1.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary shell commands through the /api.php endpoint. Attackers can craft a malicious LaTeX payload with shell commands that are executed when proc…

    ammarfaizi2 Tea LaTex
  • Critical 9.8
    CVE-2020-37010

    BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)

    BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pastin…

    BearshareOfficial BearShare Lite
  • Critical 9.8
    CVE-2020-37002

    Ajenti 2.1.36 Authenticated Remote Code Execution

    Ajenti 2.1.36 contains a post-authenticated remote command execution vulnerability that allows remote attackers to execute arbitrary commands after successful login. Attackers can leverage the /api/terminal/create endpoint to send a netcat reverse shell paylo…

    Ajenti Project ajenti
  • Critical 9.8
    CVE-2020-37000

    Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)

    Free MP3 CD Ripper 2.8 contains a stack buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting a malicious WAV file with oversized payload. Attackers can leverage a specially crafted exploit file with shellcode, SEH b…

    Cleanersoft Software Free MP3 CD Ripper
  • Critical 9.8
    CVE-2020-36997

    BacklinkSpeed 2.4 - Buffer Overflow PoC (SEH)

    BacklinkSpeed 2.4 contains a buffer overflow vulnerability that allows attackers to corrupt the Structured Exception Handler (SEH) chain through malicious file import. Attackers can craft a specially designed payload file to overwrite SEH addresses, potential…

    Dummysoftware BacklinkSpeed
  • Critical 9.8
    CVE-2025-69929

    An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the pass…