Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-9155 State: PUBLISHED Published: 2025-08-19T19:32:07.042Z Last Updated: 2025-08-19T19:45:32.987Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Tour and Travel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Impacted is an unknown function of the file /user/forget_password.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320535 - https://vuldb.com/?ctiid.320535 - https://vuldb.com/?submit.630202 - https://github.com/HjsCS/CVE/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-9156 State: PUBLISHED Published: 2025-08-19T19:32:10.183Z Last Updated: 2025-08-19T19:50:57.648Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Sports Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/sports.php. Performing manipulation of the argument code results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320536 - htt
c and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320536 - https://vuldb.com/?ctiid.320536 - https://vuldb.com/?submit.630274 - https://github.com/kangsf1989/2025/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-9157 State: PUBLISHED Published: 2025-08-19T20:02:08.552Z Last Updated: 2025-08-19T20:32:45.294Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: appneta Products: tcpreplay Problem Types: CWE-416, CWE-119 Description: A vulnerability was determined in appneta tcpreplay up to 4.5.2-beta2. The impacted element is the function untrunc_packet of the file src/tcpedit/edit_packet.c of the component tcprewrite. Executing manipulation can lead to use after free. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. This patch is called 73008f261f1cdf7a1087dc8759115242696d35d
he exploit has been publicly disclosed and may be utilized. This patch is called 73008f261f1cdf7a1087dc8759115242696d35da. Applying a patch is advised to resolve this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320537 - https://vuldb.com/?ctiid.320537 - https://vuldb.com/?submit.630495 - https://github.com/appneta/tcpreplay/issues/970 - https://github.com/appneta/tcpreplay/issues/970#issuecomment-3198966053 - https://drive.google.com/file/d/1_aONM_TOF96JbnYviPyZhVk-7HObtX8H/view?usp=sharing - https://github.com/appneta/tcpreplay/commit/73008f261f1cdf7a1087dc8759115242696d35da
CVE ID: CVE-2025-9158 State: PUBLISHED Published: 2025-10-24T06:00:10.918Z Last Updated: 2025-10-24T16:55:03.802Z Vendors: Best Practical Products: Request Tracker Problem Types: CWE-79 Description: The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which displays invitation data without HTML sanitization. XSS vulnerability allows an attacker to send a specifically crafted e-mail enabling JavaScript code execution by displaying the ticket in the context of the logged-in user. This vulnerability affects versions from 5.0.4 through 5.0.8 and from 6.0.0 through 6.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
rom 5.0.4 through 5.0.8 and from 6.0.0 through 6.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/10/CVE-2025-9158/ - https://requesttracker.com/request-tracker/
CVE ID: CVE-2025-9160 State: PUBLISHED Published: 2025-09-09T12:30:45.806Z Last Updated: 2025-09-09T13:11:13.829Z Vendors: Rockwell Automation Products: CompactLogix® 5480 Problem Types: CWE-306 Description: A code execution security issue exists in the affected product. An attacker with physical access could abuse the maintenance menu of the controller with a crafted payload. The security issue can result in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1746.html
CVE ID: CVE-2025-9161 State: PUBLISHED Published: 2025-09-09T12:57:40.934Z Last Updated: 2025-09-09T13:18:44.719Z Vendors: Rockwell Automation Products: FactoryTalk Optix Problem Types: CWE-77 Description: A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1742.html
CVE ID: CVE-2025-9162 State: PUBLISHED Published: 2025-08-21T15:40:25.136Z Last Updated: 2025-11-07T18:37:21.785Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat build of Keycloak 26.0, Red Hat build of Keycloak 26.2, Red Hat build of Keycloak 26.2.9 Problem Types: CWE-526 Description: A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are processed. An attacker can leverage this to inject mali
ss allows for injection attacks when crafted realm documents are processed. An attacker can leverage this to inject malicious content during the realm import procedure. This can lead to unintended consequences within the Keycloak environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:15336 - https://access.redhat.com/errata/RHSA-2025:15337 - https://access.redhat.com/errata/RHSA-2025:15338 - https://access.redhat.com/errata/RHSA-2025:15339 - https://access.redhat.com/errata/RHSA-2025:16399 - https://access.redhat.com/errata/RHSA-2025:16400 - https://access.redhat.com/security/cve/CVE-2025-9162 - https://bugzilla.redhat.com/sho
dhat.com/errata/RHSA-2025:16400 - https://access.redhat.com/security/cve/CVE-2025-9162 - https://bugzilla.redhat.com/show_bug.cgi?id=2389396
CVE ID: CVE-2025-9164 State: PUBLISHED Published: 2025-10-27T13:53:40.216Z Last Updated: 2025-10-28T03:56:02.643Z Vendors: Docker Products: Docker Desktop Problem Types: CWE-427 Description: Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through malicious DLL placement.This issue affects Docker Desktop: through 4.48.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/
CVE ID: CVE-2025-9165 State: PUBLISHED Published: 2025-08-19T20:02:13.694Z Last Updated: 2025-10-01T15:25:44.426Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: LibTIFF Problem Types: CWE-401, CWE-404 Description: A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is characterized by high complexity. It is indicated that the exploitability is difficult. The exploit has been published and may be used.
high complexity. It is indicated that the exploitability is difficult. The exploit has been published and may be used. There is ongoing doubt regarding the real existence of this vulnerability. This patch is called ed141286a37f6e5ddafb5069347ff5d587e7a4e0. It is best practice to apply a patch to resolve this issue. A researcher disputes the security impact of this issue, because "this is a memory leak on a command line tool that is about to exit anyway". In the reply the project maintainer declares this issue as "a simple 'bug' when leaving the command line tool and (...) not a security issue at all". Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
not a security issue at all". Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.320543 - https://vuldb.com/?ctiid.320543 - https://vuldb.com/?submit.630506 - https://vuldb.com/?submit.630507 - https://gitlab.com/libtiff/libtiff/-/issues/728 - https://gitlab.com/libtiff/libtiff/-/merge_requests/747 - https://drive.google.com/file/d/1FWhmkzksH8-qU0ZM6seBzGNB3aPnX3G8/view?usp=sharing - https://gitlab.com/libtiff/libtiff/-/commit/ed141286a37f6e5ddafb5069347ff5d587e7a4e0 - http://www.libtiff.org/
CVE ID: CVE-2025-9166 State: PUBLISHED Published: 2025-09-09T12:36:15.177Z Last Updated: 2025-09-09T13:07:58.099Z Vendors: Rockwell Automation Products: ControlLogix® 5580 Problem Types: CWE-476 Description: A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1747.html
CVE ID: CVE-2025-9167 State: PUBLISHED Published: 2025-08-19T20:32:06.486Z Last Updated: 2025-08-20T15:19:05.039Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: SolidInvoice Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice/recurring of the component Recurring Invoice Module. The manipulation of the argument client name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addi
to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320544 - https://vuldb.com/?ctiid.320544 - https://vuldb.com/?submit.630624 - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%95%B5%EF%B8%8F%E2%80%8D%E2%99%82%EF%B8%8F%20PoC%20-%20Stored%20XSS%201.md - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%95%B5%EF%B8%8F%E2%80%8D%E2%99%82%EF%B8%8F%20PoC%20-%20Stored%20XSS%201.md#-exploitation-steps
CVE ID: CVE-2025-9168 State: PUBLISHED Published: 2025-08-19T21:02:06.601Z Last Updated: 2025-08-20T15:16:42.505Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: SolidInvoice Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice of the component Invoice Creation Module. The manipulation of the argument Client Name results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes:
be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320545 - https://vuldb.com/?ctiid.320545 - https://vuldb.com/?submit.630625 - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%93%84POC%20Stored%20XSS%202.md - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%93%84POC%20Stored%20XSS%202.md#-exploitation-steps
CVE ID: CVE-2025-9169 State: PUBLISHED Published: 2025-08-19T21:32:06.661Z Last Updated: 2025-08-20T15:16:35.580Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: SolidInvoice Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in SolidInvoice up to 2.4.0. Impacted is an unknown function of the file /quotes of the component Quote Module. This manipulation of the argument Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA AD
The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320546 - https://vuldb.com/?ctiid.320546 - https://vuldb.com/?submit.630626 - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%93%84PoC%20-%20Stored%20XSS%203.md - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%93%84PoC%20-%20Stored%20XSS%203.md#-exploitation-steps
CVE ID: CVE-2025-9170 State: PUBLISHED Published: 2025-08-19T22:02:05.880Z Last Updated: 2025-08-20T15:16:27.386Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: SolidInvoice Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in SolidInvoice up to 2.4.0. The affected element is an unknown function of the file /tax/rates of the component Tax Rates Module. Such manipulation of the argument Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA
d. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320547 - https://vuldb.com/?ctiid.320547 - https://vuldb.com/?submit.630627 - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%93%84PoC%20-Stored%20XSS%204.md - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%93%84PoC%20-Stored%20XSS%204.md#-exploitation-steps
CVE ID: CVE-2025-9171 State: PUBLISHED Published: 2025-08-19T22:32:05.818Z Last Updated: 2025-08-20T15:16:20.030Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: SolidInvoice Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in SolidInvoice up to 2.4.0. The impacted element is an unknown function of the file /clients of the component Clients Module. Performing manipulation of the argument Name results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any w
ed to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320548 - https://vuldb.com/?ctiid.320548 - https://vuldb.com/?submit.630639 - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%95%B5%EF%B8%8F%E2%80%8D%E2%99%82%EF%B8%8F%20PoC%20%E2%80%93%20Stored%20XSS%205.md - https://github.com/Gabrielmouraofc/PoC_Vuldb/blob/main/%F0%9F%95%B5%EF%B8%8F%E2%80%8D%E2%99%82%EF%B8%8F%20PoC%20%E2%80%93%20Stored%20XSS%205.md#-exploitation-steps
CVE ID: CVE-2025-9172 State: PUBLISHED Published: 2025-08-26T03:24:49.126Z Last Updated: 2025-08-26T13:36:06.701Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: pierrelannoy Products: Vibes Problem Types: CWE-89 Description: The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the
o append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/786b1b8f-7f63-4ac4-a808-668b38bf0fb4?source=cve - https://plugins.trac.wordpress.org/browser/vibes/tags/2.2.0
CVE ID: CVE-2025-9173 State: PUBLISHED Published: 2025-08-20T11:02:06.184Z Last Updated: 2025-08-20T13:19:07.188Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: Emlog Pro Problem Types: CWE-434, CWE-284 Description: A weakness has been identified in Emlog Pro up to 2.5.18. This issue affects some unknown processing of the file /admin/media.php?action=upload&sid=0. Executing manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Ana
could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320765 - https://vuldb.com/?ctiid.320765 - https://vuldb.com/?submit.631098 - https://github.com/lan041221/cvec/issues/2
CVE ID: CVE-2025-9174 State: PUBLISHED Published: 2025-08-19T22:32:08.348Z Last Updated: 2025-08-20T15:16:13.619Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: neurobin Products: shc Problem Types: CWE-78, CWE-77 Description: A vulnerability was determined in neurobin shc up to 4.0.3. This vulnerability affects the function make of the file src/shc.c of the component Filename Handler. Executing manipulation can lead to os command injection. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320555 - https:/
may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320555 - https://vuldb.com/?ctiid.320555 - https://vuldb.com/?submit.630742 - https://magnificent-dill-351.notion.site/Command-Execution-in-shc-4-0-3-249c693918ed8040abe3e636c7f18c96
CVE ID: CVE-2025-9175 State: PUBLISHED Published: 2025-08-19T23:02:07.237Z Last Updated: 2025-08-20T15:16:07.288Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: neurobin Products: shc Problem Types: CWE-121, CWE-119 Description: A vulnerability was identified in neurobin shc up to 4.0.3. This issue affects the function make of the file src/shc.c. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320556 - https://vuldb.com/?ctiid.320556 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320556 - https://vuldb.com/?ctiid.320556 - https://vuldb.com/?submit.630743 - https://magnificent-dill-351.notion.site/Stack-Overflow-in-shc-4-0-3-249c693918ed804b8c44ee11eb0af087
CVE ID: CVE-2025-9176 State: PUBLISHED Published: 2025-08-19T23:32:07.022Z Last Updated: 2025-08-20T15:15:58.216Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: neurobin Products: shc Problem Types: CWE-78, CWE-77 Description: A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320557 - h
and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320557 - https://vuldb.com/?ctiid.320557 - https://vuldb.com/?submit.630744 - https://magnificent-dill-351.notion.site/Command-Execution-of-env-in-shc-4-0-3-249c693918ed80c997f4e9420f945d01
CVE ID: CVE-2025-9177 State: PUBLISHED Published: 2025-10-14T12:48:52.124Z Last Updated: 2025-10-14T13:36:19.778Z Vendors: Rockwell Automation Products: 1715-AENTR EtherNet/IP Adapter Problem Types: CWE-770 Description: A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover and utilize the webpage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1757.htm
ulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1757.html
CVE ID: CVE-2025-9178 State: PUBLISHED Published: 2025-10-14T12:51:36.797Z Last Updated: 2025-10-14T13:33:43.212Z Vendors: Rockwell Automation Products: 1715-AENTR EtherNet/IP Adapter Problem Types: CWE-787 Description: A denial-of-service security issue exists in the affected product and version. The security issue is caused through CIP communication using crafted payloads. The security issue could result in no CIP communication with 1715 EtherNet/IP Adapter.A restart is required to recover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1757.html
CVE ID: CVE-2025-9179 State: PUBLISHED Published: 2025-08-19T20:33:53.949Z Last Updated: 2025-11-03T18:14:10.275Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bu
onal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1979527 - https://www.mozilla.org/security/advisories/mfsa2025-64/ - https://www.mozilla.org/security/advisories/mfsa2025-65/ - https://www.mozilla.org/security/advisories/mfsa2025-66/ - https://www.mozilla.org/security/advisories/mfsa2025-67/ - https://www.mozilla.org/security/advisories/mfsa2025-70/ - https://www.mozilla.org/security/advisories/mfsa2025-71/ - https://www.mozilla.org/security/advisories/mfsa2025-72/