Skip to content
OpenAdvisories

Archive

10 November 2025

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-64513 Public exploit

    Milvus Proxy has Critical Authentication Bypass Vulnerability

    Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gainin…

  • High 8.6
    CVE-2025-64512 Public exploit

    pdfminer.six vulnerable to Arbitrary Code Execution via Crafted PDF Input

    Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version 20251107, pdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file.…

  • Medium 4.3
    CVE-2025-12433 Public exploit

    Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of …

  • Medium 6.5
    CVE-2025-63296 Public exploit

    KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boo…

  • Medium 6.5
    CVE-2025-60876 Public exploit

    BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/qu…

  • Medium 6.5
    CVE-2025-56503 Public exploit

    An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate…