Skip to content
OpenAdvisories

Archive

10 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /10 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.7
    CVE-2025-64529

    SpiceDB's WriteRelationships fails silently if payload is too big

    SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions prior to 1.45.2, users who use the exclusion operator somewhere in their authorization schema; have configured their SpiceDB server such…

    authzed spicedb github.com/authzed/spicedb Go
  • Low 2.0
    CVE-2025-64181

    OpenEXR Makes Use of Uninitialized Memory

    OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing `openexr_exrcheck_fuzzer`, Valgrind reports…

    Academy Software Foundation openexr openexr openexr Debian PyPI
  • Low 3.5
    CVE-2025-62780 Scanner template

    changedetection.io vulnerable to stored XSS in Watch update via API

    changedetection.io is a free open source web page change detection tool. A Stored Cross Site Scripting is present in changedetection.io Watch update API in versions prior to 0.50.34 due to insufficient security checks. Two scenarios are possible. In the first…

    dgtlmoon changedetection.io changedetection-io PyPI
  • Low 2.7
    CVE-2025-64682

    In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit

    JetBrains Hub
  • Low 2.7
    CVE-2025-64681

    In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations

    JetBrains Hub
  • Low 2.7
    CVE-2025-12923

    liweiyi ChestnutCMS download resourceDownload path traversal

    A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function resourceDownload of the file /dev-api/common/download. Executing manipulation of the argument path can lead to path traversal. The attack can be launche…

    liweiyi ChestnutCMS
  • Low 3.8
    CVE-2025-63678

    An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manag…