Skip to content
OpenAdvisories

Archive

30 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /30 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-54576

    OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion

    OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions 7.10.0 and below, oauth2-proxy deployments are vulnerable when using th…

    oauth2-proxy oauth2-proxy github.com/oauth2-proxy/oauth2-proxy github.com/oauth2-proxy/oauth2-proxy/v7 Go
  • Critical 9.8
    CVE-2025-46811 Public exploit EPSS 14%

    SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

    A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from …

    SUSE SUSE Manager Server Module 4.3 Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
  • Critical 9.1
    CVE-2025-54430 Public exploit

    dedupe is vulnerable to secret exfiltration via `issue_comment`

    dedupe is a python library that uses machine learning to perform fuzzy matching, deduplication and entity resolution quickly on structured data. Before commit 3f61e79, a critical severity vulnerability has been identified within the .github/workflows/benchmar…

    dedupeio dedupe
  • Critical 9.8
    CVE-2025-50578 Scanner template

    LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically…