Skip to content
OpenAdvisories

Archive

30 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /30 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2025-4686 Public exploit

    Time-Based Blind SQLi in Kodmatic Computer's Online Exam and Assessment

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kodmatic Computer Software Tourism Construction Industry and Trade Ltd. Co. Online Exam and Assessment allows SQL Injection. This issue affects Online Exam a…

    Kodmatic Computer Software Tourism Construction Industry and Trade Ltd. Co. Online Exam and Assessment
  • High 8.8
    CVE-2026-24854 Public exploit

    Church CRM has SQL injection in PaddleNumEditor.php

    ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in endpoint `/PaddleNumEditor.php` in ChurchCRM prior to version 6.7.2. Any authenticated user, including one with zero assigned permissions, can exploit SQL injection …

    ChurchCRM CRM
  • High 7.2
    CVE-2026-0709 Public exploit

    Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input valid…

    Hikvision DS-3WAP623E-SI DS-3WAP522-SI DS-3WAP622E-SI