Skip to content
OpenAdvisories

Archive

7 July 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.0
    CVE-2025-32023 Public exploit

    Redis allows out of bounds writes in hyperloglog commands leading to RCE

    Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially…

  • Critical 9.4
    CVE-2025-6793 Public exploit EPSS 17%

    Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

    Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability. This vulnerability allows remote attackers to delete arbitrary files and disclose sensitive information on affected installations…

  • High 7.7
    CVE-2025-6713 Public exploit

    MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage

    An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This i…