Skip to content
OpenAdvisories

Archive

7 July 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.0
    CVE-2025-32023 Public exploit

    Redis allows out of bounds writes in hyperloglog commands leading to RCE

    Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially…

  • High 7.7
    CVE-2025-6713 Public exploit

    MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage

    An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This i…