Skip to content
OpenAdvisories

Archive

30 July 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-46811 Public exploit EPSS 14%

    SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

    A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from …

  • Critical 9.1
    CVE-2025-54430 Public exploit

    dedupe is vulnerable to secret exfiltration via `issue_comment`

    dedupe is a python library that uses machine learning to perform fuzzy matching, deduplication and entity resolution quickly on structured data. Before commit 3f61e79, a critical severity vulnerability has been identified within the .github/workflows/benchmar…