Skip to content
OpenAdvisories

Archive

29 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /29 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.8
    CVE-2025-10931

    Umami Analytics - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-109

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Umami Analytics allows Cross-Site Scripting (XSS).This issue affects Umami Analytics: from 0.0.0 before 1.0.1.

    Drupal Umami Analytics drupal/umami_analytics Packagist
  • Low 3.5
    CVE-2025-11203 Public exploit

    LiteLLM Information health API_KEY Information Disclosure Vulnerability

    LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The specific …

    LiteLLM LiteLLM
  • Low 2.1
    CVE-2025-62787

    Wazuh Vulnerable to Heap-based Buffer Over-read in DecodeWinevt

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWinevt() when child_attr[p]->attributes[j] is accessed, because the corresponding index (j) is incorrect. A compr…

    wazuh wazuh
  • Low 3.0
    CVE-2025-56558

    The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct …

    Dyson MQTT server