Skip to content
OpenAdvisories

Archive

29 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /29 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.9
    CVE-2026-25046

    [Kimi VS Code] Command Injection in publish scripts vsix-publish.js and ovsx-publish.js

    Kimi Agent SDK is a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime in applications. The vsix-publish.js and ovsx-publish.js scripts pass filenames to execSync() as shell command strings. Prior to version 0.1.6, filenames containing shell …

    Moonshot AI kimi-agent-sdk
  • Low 3.1
    CVE-2025-15288

    Tanium addressed an improper access controls vulnerability in Interact.

    Tanium addressed an improper access controls vulnerability in Interact.

    Tanium Interact
  • Low 3.5
    CVE-2026-1598

    Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting

    A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname…

    Bdtask Bhojon All-In-One Restaurant Management System
  • Low 2.7
    CVE-2026-1588

    jishenghua jshERP installByPath install path traversal

    A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the component com.gitee.starblues.integration.operator.DefaultPluginOperator. The manipulation of the argum…

    jishenghua jshERP
  • Low 3.7
    CVE-2025-53869

    Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a ma…

    Ricoh Company BROTHER INDUSTRIES Konica Minolta Multiple MFPs