Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-12940 State: PUBLISHED Published: 2025-11-11T16:17:25.837Z Last Updated: 2025-11-14T17:41:18.640Z Vendors: NETGEAR Products: WAX610, WAX610Y Problem Types: CWE-532 Description: Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points). An user having access to the syslog server can read the logs containing these credentials. This issue affects WAX610: before 10.8.11.4; WAX610Y: before 10.8.11.4. Devices managed with Insight get automatic updates. If not, please check the firmware version and update to the latest. Fixed in: WAX610 firmware 11.8.0.10
omatic updates. If not, please check the firmware version and update to the latest. Fixed in: WAX610 firmware 11.8.0.10 or later. WAX610Y firmware 11.8.0.10 or later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/support/product/wax610 - https://www.netgear.com/support/product/wax610y - https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025
CVE ID: CVE-2025-12942 State: PUBLISHED Published: 2025-11-11T16:17:37.212Z Last Updated: 2025-11-13T04:55:35.632Z Vendors: NETGEAR Products: R6260, R6850 Problem Types: CWE-20 Description: Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/support/product/r6850 - https://www.netgear.com/support/product/r6260 - https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-
ct/r6850 - https://www.netgear.com/support/product/r6260 - https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025
CVE ID: CVE-2025-12943 State: PUBLISHED Published: 2025-11-11T16:17:44.766Z Last Updated: 2025-11-13T04:55:33.441Z Vendors: NETGEAR Products: RAX30, RAXE300 Problem Types: CWE-295 Description: Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device. Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest. Fixed in: RAX30 firmware 1.0.14.108 or later. RAXE300
f not, please check the firmware version and update to the latest. Fixed in: RAX30 firmware 1.0.14.108 or later. RAXE300 firmware 1.0.9.82 or later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/support/product/rax30 - https://www.netgear.com/support/product/raxe300 - https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025
CVE ID: CVE-2025-12944 State: PUBLISHED Published: 2025-11-11T16:17:51.202Z Last Updated: 2025-11-13T04:55:32.716Z Vendors: NETGEAR Products: DGN2200v4 Problem Types: CWE-20 Description: Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the device. Please check the firmware version and update to the latest. Fixed in: DGN2200v4 firmware 1.0.0.132 or later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/support/product/dgn2200v4 - https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025
CVE ID: CVE-2025-12953 State: PUBLISHED Published: 2025-11-11T11:03:45.759Z Last Updated: 2025-11-14T15:29:30.681Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: techlabpro1 Products: Classified Listing – AI-Powered Classified ads & Business Directory Plugin Problem Types: CWE-862 Description: The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the "rtcl_ajax_add_listing_type", "rtcl_ajax_update_listing_type", and "rtcl_ajax_delete_listing_type" function in all versions up to, and including, 5.2.0. This makes it possible fo
pe", and "rtcl_ajax_delete_listing_type" function in all versions up to, and including, 5.2.0. This makes it possible for authenticated attackers, with subscriber level access and above, to add, update, or delete listing types. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/811f147e-5829-4f7e-91d8-9dba780950d5?source=cve - https://plugins.trac.wordpress.org/changeset/3389342/classified-listing/trunk/app/Controllers/Ajax/AjaxListingType.php
CVE ID: CVE-2025-12955 State: PUBLISHED Published: 2025-11-18T09:27:36.608Z Last Updated: 2025-11-18T21:32:24.662Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: rajeshsingh520 Products: Live sales notification for WooCommerce Problem Types: CWE-862 Description: The Live sales notification for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.3.39. This is due to the "getOrders" function lacking proper authorization and capability checks when the plugin is configured to display recent order information. This makes it possible for unauthenticated attackers to extract sensitive customer information i
cent order information. This makes it possible for unauthenticated attackers to extract sensitive customer information including buyer first names, city, state, country, purchase time and date, and product details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1cebcf16-ae7f-45c4-8e1d-80ede4c32106?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3394241%40live-sales-notifications-for-woocommerce&old=3389540%40live-sales-notifications-for-woocommerce&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12961 State: PUBLISHED Published: 2025-11-18T08:27:37.109Z Last Updated: 2025-11-18T21:06:36.835Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: arkadiykilesso Products: Download Panel (Biggiko Team) Problem Types: CWE-862 Description: The Download Panel plugin for WordPress is vulnerable to unauthorized settings modification due to a missing capability check on the 'wp_ajax_save_settings' AJAX action in all versions up to, and including, 1.3.3. This is due to the absence of any capability verification in the `dlpn_save_settings()` function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to arbit
ttings()` function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to arbitrarily modify plugin settings including display text, download links, button colors, and other visual customizations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e1a1df7e-1a57-45b3-a4b3-cb3218782ad9?source=cve - https://plugins.trac.wordpress.org/browser/download-panel/tags/1.3.3/plugin.php#L50 - https://plugins.trac.wordpress.org/browser/download-panel/tags/1.3.3/plugin.php#L51
CVE ID: CVE-2025-12962 State: PUBLISHED Published: 2025-11-18T08:27:32.912Z Last Updated: 2025-11-18T14:48:42.850Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: willbontrager Products: Local Syndication Problem Types: CWE-918 Description: The Local Syndication plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.5a via the `url` parameter in the `[syndicate_local]` shortcode. This is due to the use of `wp_remote_get()` instead of `wp_safe_remote_get()` which lacks protections against requests to internal/private IP addresses and localhost. This makes it possible for authenticated attackers, with Contribu
quests to internal/private IP addresses and localhost. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application, which can be used to query and modify information from internal services, scan internal networks, and access resources that should not be accessible from external networks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7774cdfd-622a-4608-9efd-273923a0d0aa?source=cve - https://plugins.trac.wordpress.org/browser/local-syndication/tags/1.5/local_syndication.php#L64 - https://plugins.trac.wordp
s://plugins.trac.wordpress.org/browser/local-syndication/tags/1.5/local_syndication.php#L64 - https://plugins.trac.wordpress.org/browser/local-syndication/tags/1.5/local_syndication.php#L41
CVE ID: CVE-2025-12964 State: PUBLISHED Published: 2025-11-21T09:27:00.601Z Last Updated: 2025-11-21T14:55:20.219Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: nalam-1 Products: Magical Products Display – Elementor WooCommerce Widgets | Product Sliders, Grids & AJAX Search Problem Types: CWE-79 Description: The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdpr_title_tag' and 'mpdpr_subtitle_tag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on user-supplied HTML tag names. This makes it possible for a
due to insufficient input sanitization and output escaping on user-supplied HTML tag names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/758e23b9-c3d5-4f1c-9659-66483d6f0578?source=cve - https://plugins.trac.wordpress.org/browser/magical-products-display/tags/1.1.29/includes/widgets/pricing-table.php#L2149 - https://plugins.trac.wordpress.org/browser/magical-products-display/tags/1.1.29/includes/widgets/pricing-table.php#L2
- https://plugins.trac.wordpress.org/browser/magical-products-display/tags/1.1.29/includes/widgets/pricing-table.php#L2167 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3394768%40magical-products-display&new=3394768%40magical-products-display&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12967 State: PUBLISHED Published: 2025-11-10T18:09:10.157Z Last Updated: 2025-11-11T04:55:39.968Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AWS Products: JDBC Wrapper, Go Wrapper, NodeJS Wrapper, Python Wrapper, ODBC driver Problem Types: CWE-470 Description: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. We recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-1
users. We recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-17, AWS NodeJS Wrapper to v2.0.1, AWS Python Wrapper to v1.4.0 and AWS PGSQL ODBC driver to v1.0.1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-028/ - https://github.com/aws/aws-advanced-jdbc-wrapper/releases/tag/2.6.5 - https://github.com/aws/aws-advanced-go-wrapper/releases/tag/release-2025-10-17 - https://github.com/aws/aws-advanced-python-wrapper/releases/tag/1.4.0 - https://github.com/aws/aws-pgsql-odbc/releases/tag/1.0.1 - https://github.com/aws/aws-advanced-nodejs-wrapper/releases/tag/2.0.
/github.com/aws/aws-pgsql-odbc/releases/tag/1.0.1 - https://github.com/aws/aws-advanced-nodejs-wrapper/releases/tag/2.0.1 - https://github.com/aws/aws-advanced-python-wrapper/security/advisories/GHSA-4jvf-wx3f-2x8q - https://github.com/aws/aws-advanced-jdbc-wrapper/security/advisories/GHSA-7xw4-g7mm-r4hh - https://github.com/aws/aws-pgsql-odbc/security/advisories/GHSA-q327-fgm8-7mxf - https://github.com/aws/aws-advanced-go-wrapper/security/advisories/GHSA-7wq2-32h4-9hc9 - https://github.com/aws/aws-advanced-nodejs-wrapper/security/advisories/GHSA-8wj8-cfxr-9374
CVE ID: CVE-2025-12969 State: PUBLISHED Published: 2025-11-24T14:41:05.630Z Last Updated: 2025-11-24T18:02:26.177Z Vendors: FluentBit Products: FluentBit Problem Types: CWE-306: Missing Authentication for Critical Function Description: Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing authentication controls, attackers can inject forged log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ing
log records, flood alerting systems, or manipulate routing decisions, compromising the authenticity and integrity of ingested logs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluentbit.io/announcements/v4.1.0/
CVE ID: CVE-2025-12970 State: PUBLISHED Published: 2025-11-24T14:39:52.569Z Last Updated: 2025-11-24T17:00:03.177Z Vendors: FluentBit Products: FluentBit Problem Types: CWE-121: Stack-based Buffer Overflow Description: The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluentbit.io/announcements/v4.1.0/
CVE ID: CVE-2025-12972 State: PUBLISHED Published: 2025-11-24T14:40:36.275Z Last Updated: 2025-11-24T19:09:14.319Z Vendors: FluentBit Products: FluentBit Problem Types: CWE-35: Path Traversal Description: Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin uses untrusted tag input to construct file paths. This allows attackers with network access to craft tags containing path traversal sequences that cause Fluent Bit to write files outside the intended output directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluentbit.io/announcements/v4.1.0/
CVE ID: CVE-2025-12973 State: PUBLISHED Published: 2025-11-21T16:28:13.751Z Last Updated: 2025-11-21T16:40:01.375Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: oc3dots Products: S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator Problem Types: CWE-434 Description: The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site'
ossible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ac9d2b64-aff6-418a-bfe7-ec91b177ad6b?source=cve - https://plugins.trac.wordpress.org/browser/s2b-ai-assistant/trunk/lib/helpers/Utils.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399267%40s2b-ai-assistant&new=3399267%40s2b-ai-assistant&sfp_email=&sfph_mail= - https://github.com/d0n601/CVE-2025-12973 - https://ryankozak.com/posts/cve-2025-12973/
CVE ID: CVE-2025-12974 State: PUBLISHED Published: 2025-11-18T03:27:07.110Z Last Updated: 2025-11-19T16:49:22.786Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Gravity Forms Products: Gravity Forms Problem Types: CWE-434 Description: The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the legacy chunked upload mechanism in all versions up to, and including, 2.9.21.1. This is due to the extension blacklist not including .phar files, which can be uploaded through the chunked upload mechanism. This makes it possible for unauthenticated attackers to upload executable .phar files and achieve remot
pload mechanism. This makes it possible for unauthenticated attackers to upload executable .phar files and achieve remote code execution on the server, granted they can discover or enumerate the upload path. In order for an attacker to achieve RCE, the web server needs to be set up to process .phar file as PHP via file handler mapping or similar. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b6395439-da45-4b64-8e30-b106dffd46c1?source=cve - https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/includes/upload.php#L97 - https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9
4f073e9d0d491e17b89365b48c20/includes/upload.php#L97 - https://github.com/pronamic/gravityforms/blob/06de1b7e169e4f073e9d0d491e17b89365b48c20/common/common.php#L4178 - https://docs.gravityforms.com/gravityforms-change-log/
CVE ID: CVE-2025-12977 State: PUBLISHED Published: 2025-11-24T14:40:12.642Z Last Updated: 2025-11-24T19:14:10.912Z Vendors: FluentBit Products: FluentBit Problem Types: CWE-1287: Improper Validation of Specified Type of Input Description: Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid tags. Because tags influence routing and some outputs derive filenames or contents from tags, this can allow newline injection, path traversal, forged record injec
me outputs derive filenames or contents from tags, this can allow newline injection, path traversal, forged record injection, or log misrouting, impacting data integrity and log routing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluentbit.io/announcements/v4.1.0/
CVE ID: CVE-2025-12978 State: PUBLISHED Published: 2025-11-24T14:42:06.305Z Last Updated: 2025-11-24T15:29:06.000Z Vendors: FluentBit Products: FluentBit Problem Types: CWE-698: Execution After Redirect (EAR) Description: Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching. This allows crafted inputs where a tag prefix is incorrectly treated as a full match. A remote attacker with authenticated or exposed access to these input endpoints can exploit this behavior to manipulate tags and redirect records to unintended destinations. This compromises the authenticity of ingested logs and c
anipulate tags and redirect records to unintended destinations. This compromises the authenticity of ingested logs and can allow injection of forged data, alert flooding and routing manipulation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluentbit.io/announcements/v4.1.0/
CVE ID: CVE-2025-12979 State: PUBLISHED Published: 2025-11-13T03:27:37.857Z Last Updated: 2025-11-13T14:34:29.933Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: uscnanbu Products: Welcart e-Commerce Problem Types: CWE-862 Description: The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'usces_export' action in all versions up to, and including, 2.11.24. This makes it possible for unauthenticated attackers to access configured payment credentials (ex. PayPal api secret) , as well as business contact details, mail templates, and other operational settings tied to the store. Additio
secret) , as well as business contact details, mail templates, and other operational settings tied to the store. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/26255cd9-2361-4d17-8d1b-9bdadcc69043?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3394001%40usc-e-shop&new=3394001%40usc-e-shop&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12983 State: PUBLISHED Published: 2025-11-15T08:13:32.098Z Last Updated: 2025-11-17T20:17:39.698Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-789 Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service condition by submitting specially crafted markdown content with nested formatting patterns. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2
t Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/296257 - https://hackerone.com/reports/3419588
CVE ID: CVE-2025-12998 State: PUBLISHED Published: 2025-11-12T11:16:59.384Z Last Updated: 2025-11-12T14:13:55.382Z Vendors: TYPO3 Products: Extension "Modules" Problem Types: CWE-287 Description: Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-ext-sa-2025-015
CVE ID: CVE-2025-13012 State: PUBLISHED Published: 2025-11-11T15:47:11.434Z Last Updated: 2025-11-19T19:07:49.235Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Race condition in the Graphics component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1991458 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-89/ - https://www.mozilla.org/security/advisories
es/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-89/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/
CVE ID: CVE-2025-13013 State: PUBLISHED Published: 2025-11-11T15:47:11.849Z Last Updated: 2025-11-19T19:08:02.183Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Mitigation bypass in the DOM: Core & HTML component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1991945 - https://www.mozilla.org/security/advisories/mfsa2025-87/ - https://www.mozilla.org/security/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-89/ - https://www.mozilla.org/security
ty/advisories/mfsa2025-88/ - https://www.mozilla.org/security/advisories/mfsa2025-89/ - https://www.mozilla.org/security/advisories/mfsa2025-90/ - https://www.mozilla.org/security/advisories/mfsa2025-91/