Skip to content
OpenAdvisories

Archive

30 January 2026

Vulnerabilities first published on this day (UTC), newest first.

← December 2025 2026 / January /30 February 2026 →
  1. 135
  2. 2103
  3. 310
  4. 49
  5. 5154
  6. 6185
  7. 7225
  8. 8196
  9. 9127
  10. 1074
  11. 1113
  12. 1286
  13. 13444
  14. 14181
  15. 15201
  16. 16144
  17. 1739
  18. 1829
  19. 19113
  20. 20233
  21. 21123
  22. 22444
  23. 23256
  24. 2465
  25. 2532
  26. 26119
  27. 27197
  28. 28206
  29. 29122
  30. 30121
  31. 3145
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-1705

    D-Link DSL-6641K Web ad_virtual_server_vdsl cross site scripting

    A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_server_vdsl of the component Web Interface. Performing a manipulation of the argument Name results in cross site scripting. It is possible to…

    D-Link DSL-6641K Network devices
  • Low 3.8
    CVE-2025-15497

    Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigg…

    OpenVPN OpenVPN openvpn Debian
  • Low 3.5
    CVE-2026-1700

    projectworlds House Rental and Property Listing sms.php cross site scripting

    A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknown code of the file /app/sms.php. This manipulation of the argument Message causes cross site scripting. It is possible to initiate the atta…

    Project Worlds House Rental and Property Listing
  • Low 2.7
    CVE-2026-25050 Public exploit

    Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy

    Vendure is an open-source headless commerce platform. Prior to version 3.5.3, the `NativeAuthenticationStrategy.authenticate()` method is vulnerable to a timing attack that allows attackers to enumerate valid usernames (email addresses). In `packages/core/src…

    vendurehq vendure @vendure/core npm
  • Low 3.7
    CVE-2026-1685

    D-Link DIR-823X Login sub_40AC74 excessive authentication

    A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote.…

    D-Link DIR-823X Network devices
  • Low 3.2
    CVE-2026-25211 Public exploit

    Llama Stack exposes secret in initialization log

    Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

    llamastack Llama Stack llama-stack PyPI