Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4070 State: PUBLISHED Published: 2025-04-29T16:00:06.364Z Last Updated: 2025-04-29T17:59:44.224Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Rail Pass Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306507 - https://vuldb.com/?ctiid.306507 - https://vuldb.com/?submit.559620 - https://github.com/Arcueicl/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4071 State: PUBLISHED Published: 2025-04-29T16:00:09.316Z Last Updated: 2025-04-29T17:58:57.197Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: COVID19 Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /test-details.php. The manipulation of the argument Status leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306508 - https://vuldb.com/?ctiid.306508 - https://vuldb.com/?submit.559904 - https://github.com/2634257398/CVE-/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4072 State: PUBLISHED Published: 2025-04-29T16:31:04.915Z Last Updated: 2025-04-29T18:32:32.669Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Nurse Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit-nurse.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
ed. Multiple parameters might be affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306509 - https://vuldb.com/?ctiid.306509 - https://vuldb.com/?submit.559939 - https://github.com/Iandweb/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4073 State: PUBLISHED Published: 2025-04-29T17:00:08.009Z Last Updated: 2025-04-29T18:31:48.454Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Student Record System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Student Record System 3.20. It has been classified as critical. Affected is an unknown function of the file /change-password.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306510 - https://vuldb.com/?ctiid.306510 - https://vuldb.com/?submit.559947 - https://github.com/bleakTS/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4074 State: PUBLISHED Published: 2025-04-29T17:31:05.306Z Last Updated: 2025-04-29T17:51:05.177Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Curfew e-Pass Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/pass-bwdates-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
ched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306511 - https://vuldb.com/?ctiid.306511 - https://vuldb.com/?submit.559983 - https://github.com/bluechips-zhao/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4075 State: PUBLISHED Published: 2025-04-29T17:31:06.488Z Last Updated: 2025-04-29T17:43:08.591Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: VMSMan Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input "><script>alert(1)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Add
to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306512 - https://vuldb.com/?ctiid.306512 - https://vuldb.com/?submit.560212
CVE ID: CVE-2025-4076 State: PUBLISHED Published: 2025-04-29T18:00:06.757Z Last Updated: 2025-04-29T18:52:45.489Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: LB-LINK Products: BL-AC3600 Problem Types: CWE-77, CWE-74 Description: A vulnerability classified as critical has been found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function easy_uci_set_option_string_0 of the file /cgi-bin/lighttpd.cgi of the component Password Handler. The manipulation of the argument routepwd leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306513 - https://vuldb.com/?ctiid.306513 - https://vuldb.com/?submit.560232 - https://github.com/GrayLxton/BLink_poc - https://github.com/GrayLxton/BLink_poc/blob/main/poc.py
CVE ID: CVE-2025-4077 State: PUBLISHED Published: 2025-04-29T18:00:08.696Z Last Updated: 2025-04-29T18:23:14.738Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: School Billing System Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulation of the argument Name leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306514 - https://vuldb.com/?ctiid.306514 - https://vuldb.com/?submit.560534 - https://github.com/zzzxc643/cve/blob/main/SCHOOL_BILLING_SYSTEM.md - https://code-projects.org/
CVE ID: CVE-2025-4078 State: PUBLISHED Published: 2025-04-29T20:08:01.910Z Last Updated: 2025-04-29T20:21:40.470Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Wangshen Products: SecGate 3600 Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=log_export_file. The manipulation of the argument file_name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306515
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306515 - https://vuldb.com/?ctiid.306515 - https://vuldb.com/?submit.560540 - https://flowus.cn/share/f5c70c53-737b-470b-aa2e-6d5524f849fb?code=G8A6P3
CVE ID: CVE-2025-4079 State: PUBLISHED Published: 2025-04-29T18:31:07.152Z Last Updated: 2025-04-29T19:10:47.881Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in PCMan FTP Server up to 2.0.7. Affected is an unknown function of the component RENAME Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306516 - https://vuldb.com/?ctiid.306516 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306516 - https://vuldb.com/?ctiid.306516 - https://vuldb.com/?submit.560541 - https://fitoxs.com/exploit/exploit-9e107d9d372bb6826bd81d3542a419d6.txt
CVE ID: CVE-2025-4080 State: PUBLISHED Published: 2025-04-29T19:31:09.233Z Last Updated: 2025-04-29T19:50:12.095Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Nurse Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306517 - https://vuldb.com/?ctiid.306517 - https://vuldb.com/?submit.560558 - https://github.com/Iandweb/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4081 State: PUBLISHED Published: 2025-05-29T14:25:08.880Z Last Updated: 2025-05-29T14:46:01.346Z Vendors: Blackmagic Design Products: DaVinci Resolve Problem Types: CWE-276 Description: Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and library load constraints allows to substitute a legitimate dylib with malicious one. A local attacker with unprivileged access can execute the application with altered dynamic library successfully bypassing Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted-permissions requires user inter
to previously granted permissions by the user. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission. This issue affects DaVinci Resolve on macOS in all versions. Last tested version: 19.1.3 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/05/tcc-bypass/ - https://www.blackmagicdesign.com/products/davinciresolve
CVE ID: CVE-2025-4082 State: PUBLISHED Published: 2025-04-29T13:13:35.242Z Last Updated: 2025-11-03T19:58:47.529Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: WebGL shader attribute memory corruption in Thunderbird for macOS Description: Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges. *This bug only affects Thunderbird for macOS. Other versions of Thunderbird are unaffected.* This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird < 128.10. Additional Analyst Notes: - CISA AD
fox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird < 128.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1937097 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-29/ - https://www.mozilla.org/security/advisories/mfsa2025-30/ - https://www.mozilla.org/security/advisories/mfsa2025-31/ - https://www.mozilla.org/security/advisories/mfsa2025-32/
CVE ID: CVE-2025-4083 State: PUBLISHED Published: 2025-04-29T13:13:36.578Z Last Updated: 2025-11-03T19:58:48.900Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Process isolation bypass using "javascript:" URI links in cross-origin frames Description: A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird < 128.10. Additional Analyst Notes: - CISA ADP Vulnric
128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird < 128.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1958350 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-29/ - https://www.mozilla.org/security/advisories/mfsa2025-30/ - https://www.mozilla.org/security/advisories/mfsa2025-31/ - https://www.mozilla.org/security/advisories/mfsa2025-32/
CVE ID: CVE-2025-4084 State: PUBLISHED Published: 2025-04-29T13:13:38.073Z Last Updated: 2025-11-03T19:58:50.272Z Vendors: Mozilla Products: Firefox ESR, Thunderbird Problem Types: Potential local code execution in "copy as cURL" command Description: Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox ESR < 128.10, Firefox ESR < 115.23, and Thunderbird < 128.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
ESR < 128.10, Firefox ESR < 115.23, and Thunderbird < 128.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198 - https://www.mozilla.org/security/advisories/mfsa2025-29/ - https://www.mozilla.org/security/advisories/mfsa2025-30/ - https://www.mozilla.org/security/advisories/mfsa2025-32/
CVE ID: CVE-2025-4085 State: PUBLISHED Published: 2025-04-29T13:13:39.469Z Last Updated: 2025-05-02T15:36:06.783Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Potential information leakage and privilege escalation in UITour actor Description: An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability affects Firefox < 138 and Thunderbird < 138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1915280 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/adviso
_bug.cgi?id=1915280 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE ID: CVE-2025-4086 State: PUBLISHED Published: 2025-04-29T13:13:40.899Z Last Updated: 2025-05-01T14:22:02.525Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Specially crafted filename could be used to obscure download type Description: A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.* This vulnerability affects Firefox < 138 and Thunderbird < 138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1945705 - https:
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1945705 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE ID: CVE-2025-4087 State: PUBLISHED Published: 2025-04-29T13:13:42.302Z Last Updated: 2025-11-03T19:58:51.757Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Unsafe attribute access during XPath parsing Description: A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and Thunderbird < 128.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozi
128.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1952465 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-29/ - https://www.mozilla.org/security/advisories/mfsa2025-31/ - https://www.mozilla.org/security/advisories/mfsa2025-32/
CVE ID: CVE-2025-4088 State: PUBLISHED Published: 2025-04-29T13:13:43.684Z Last Updated: 2025-05-01T14:22:03.157Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Cross-site request forgery via storage access API redirects Description: A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1953521 - https
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1953521 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE ID: CVE-2025-4089 State: PUBLISHED Published: 2025-04-29T13:13:45.152Z Last Updated: 2025-04-30T03:56:31.921Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Potential local code execution in "copy as cURL" command Description: Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198 - https://www.mozilla.org/security/advisorie
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE ID: CVE-2025-4090 State: PUBLISHED Published: 2025-04-29T13:13:46.677Z Last Updated: 2025-09-23T14:45:50.679Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Leaked library paths in Thunderbird for Android Description: A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability affects Firefox < 138 and Thunderbird < 138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1929478 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE ID: CVE-2025-4091 State: PUBLISHED Published: 2025-04-29T13:13:48.089Z Last Updated: 2025-11-03T19:58:53.160Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 Description: Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and Thunderbird < 128.10. Additional Analyst Notes: -
ty affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and Thunderbird < 128.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1951161%2C1952105 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-29/ - https://www.mozilla.org/security/advisories/mfsa2025-31/ - https://www.mozilla.org/security/advisories/mfsa2025-32/
CVE ID: CVE-2025-4092 State: PUBLISHED Published: 2025-04-29T13:13:49.479Z Last Updated: 2025-04-29T15:36:14.382Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 Description: Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 138 and Thunderbird < 138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1924108%2C1950780%2C1959367 - https://www.mozilla.or
ment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1924108%2C1950780%2C1959367 - https://www.mozilla.org/security/advisories/mfsa2025-28/ - https://www.mozilla.org/security/advisories/mfsa2025-31/
CVE ID: CVE-2025-4093 State: PUBLISHED Published: 2025-04-29T13:13:50.917Z Last Updated: 2025-11-03T19:58:54.629Z Vendors: Mozilla Products: Firefox ESR, Thunderbird Problem Types: Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 Description: Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 128.10 and Thunderbird < 128.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1894100 - https://
ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1894100 - https://www.mozilla.org/security/advisories/mfsa2025-29/ - https://www.mozilla.org/security/advisories/mfsa2025-32/