Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0720 State: PUBLISHED Published: 2024-01-19T16:00:06.094Z Last Updated: 2024-10-21T11:20:18.333Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: FactoMineR Products: FactoInvestigate Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in FactoMineR FactoInvestigate up to 1.9. Affected is an unknown function of the component HTML Report Generator. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251544. NOTE: The vendor was contacted early about this disclosure but did n
The identifier of this vulnerability is VDB-251544. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251544 - https://vuldb.com/?ctiid.251544 - https://drive.google.com/drive/folders/1ZFjWlD5axvhWp--I7tuiZ9uOpSBmU_f6?usp=drive_link - https://github.com/beraoudabdelkhalek/research/tree/main/CVEs/CVE-2024-0720
CVE ID: CVE-2024-0721 State: PUBLISHED Published: 2024-01-19T16:00:07.534Z Last Updated: 2025-06-09T20:54:02.275Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Jspxcms Problem Types: CWE-79 Description: A vulnerability has been found in Jspxcms 10.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Survey Label Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251545 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251545 - https://vuldb.com/?ctiid.251545 - https://github.com/sweatxi/BugHub/blob/main/jspXCMS-%20Survey%20label.pdf
CVE ID: CVE-2024-0722 State: PUBLISHED Published: 2024-01-19T16:31:03.774Z Last Updated: 2025-06-17T21:19:24.719Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Social Networking Site Problem Types: CWE-79 Description: A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251546 is the identifier assigned to this vulnerability. Additi
it has been disclosed to the public and may be used. VDB-251546 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251546 - https://vuldb.com/?ctiid.251546 - https://drive.google.com/file/d/1r-4P-gWuIxuVL2QdOXsqN6OTRtQEmo7P/view?usp=drive_link
CVE ID: CVE-2024-0723 State: PUBLISHED Published: 2024-01-19T16:31:04.840Z Last Updated: 2025-05-30T14:26:24.241Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: freeSSHd Problem Types: CWE-404 Description: A vulnerability was found in freeSSHd 1.0.9 on Windows. It has been classified as problematic. This affects an unknown part. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251547. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuld
ty is VDB-251547. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251547 - https://vuldb.com/?ctiid.251547 - https://packetstormsecurity.com/files/176545/freeSSHd-1.0.9-Denial-Of-Service.html
CVE ID: CVE-2024-0725 State: PUBLISHED Published: 2024-01-19T17:31:03.642Z Last Updated: 2025-06-17T21:19:24.849Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: ProSSHD Problem Types: CWE-404 Description: A vulnerability was found in ProSSHD 1.2 on Windows. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251548. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251548
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251548 - https://vuldb.com/?ctiid.251548 - https://packetstormsecurity.com/files/176544/ProSSHD-1.2-20090726-Denial-Of-Service.html
CVE ID: CVE-2024-0726 State: PUBLISHED Published: 2024-01-19T17:31:04.756Z Last Updated: 2024-08-26T18:23:31.683Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Project Worlds Products: Student Project Allocation System Problem Types: CWE-79 Description: A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin_login.php of the component Admin Login Module. The manipulation of the argument msg with the input test%22%3Cscript%3Ealert(%27Torada%27)%3C/script%3E leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to t
7)%3C/script%3E leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251549 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251549 - https://vuldb.com/?ctiid.251549 - https://torada.notion.site/Reflected-Cross-site-scripting-at-Project-Allocation-System-d94c7c489c2d48efa23b21a90dd0e03f?pvs=4
CVE ID: CVE-2024-0727 State: PUBLISHED Published: 2024-01-26T08:57:19.579Z Last Updated: 2025-11-03T21:51:01.094Z Vendors: OpenSSL Products: OpenSSL Problem Types: CWE-476 Description: Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results i
be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue. OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass(). We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. Additional Analyst Notes: -
t security significant. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20240125.txt - https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a - https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c - https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2 - https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8 - https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539
CVE ID: CVE-2024-0728 State: PUBLISHED Published: 2024-01-19T18:31:03.499Z Last Updated: 2025-05-09T15:13:46.604Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: ForU Products: CMS Problem Types: CWE-73 Description: A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument c_cmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251551. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
tifier of this vulnerability is VDB-251551. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251551 - https://vuldb.com/?ctiid.251551 - https://github.com/mi2acle/forucmsvuln/blob/master/LFI.md
CVE ID: CVE-2024-0729 State: PUBLISHED Published: 2024-01-19T18:31:04.550Z Last Updated: 2025-05-30T14:25:52.487Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ForU Products: CMS Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. Affected by this issue is some unknown functionality of the file cms_admin.php. The manipulation of the argument a_name leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251552. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
rability is VDB-251552. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251552 - https://vuldb.com/?ctiid.251552 - https://github.com/mi2acle/forucmsvuln/blob/master/LFI.md
CVE ID: CVE-2024-0730 State: PUBLISHED Published: 2024-01-19T19:00:05.542Z Last Updated: 2024-11-13T17:39:07.617Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Project Worlds Products: Online Time Table Generator Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file course_ajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251553 was assigned to this vulnerability. Additional Analyst Notes: - CVE Pro
ublic and may be used. The identifier VDB-251553 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251553 - https://vuldb.com/?ctiid.251553 - https://torada.notion.site/SQL-injection-at-course_ajax-php-485d8cca5f8c43dfb1f76c7336a4a45e
CVE ID: CVE-2024-0731 State: PUBLISHED Published: 2024-01-19T19:31:04.503Z Last Updated: 2025-05-30T14:25:47.070Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: PCMan Products: FTP Server Problem Types: CWE-404 Description: A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as problematic. This vulnerability affects unknown code of the component PUT Command Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251554 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251554 - https://vuldb.com/?ctiid.251554 - https://fitoxs.com/vuldb/01-PCMan%20v2.0.7-exploit.txt
CVE ID: CVE-2024-0732 State: PUBLISHED Published: 2024-01-19T20:00:05.814Z Last Updated: 2025-05-09T15:07:27.640Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: PCMan Products: FTP Server Problem Types: CWE-404 Description: A vulnerability was found in PCMan FTP Server 2.0.7 and classified as problematic. This issue affects some unknown processing of the component STOR Command Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251555. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
ted identifier of this vulnerability is VDB-251555. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251555 - https://vuldb.com/?ctiid.251555 - https://fitoxs.com/vuldb/02-PCMan%20v2.0.7-exploit.txt
CVE ID: CVE-2024-0733 State: PUBLISHED Published: 2024-01-19T20:31:03.939Z Last Updated: 2025-06-17T21:19:24.982Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Smsot Problem Types: CWE-89 Description: A vulnerability was found in Smsot up to 2.12. It has been classified as critical. Affected is an unknown function of the file /api.php of the component HTTP POST Request Handler. The manipulation of the argument data[sign] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251556. Additional Analyst Notes: - CVE Program Container: - CISA ADP
used. The identifier of this vulnerability is VDB-251556. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251556 - https://vuldb.com/?ctiid.251556 - https://note.zhaoj.in/share/3GznRo9vWRJ8
CVE ID: CVE-2024-0734 State: PUBLISHED Published: 2024-01-19T20:31:04.977Z Last Updated: 2025-05-30T14:25:11.102Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Smsot Problem Types: CWE-89 Description: A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251557 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
s assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251557 - https://vuldb.com/?ctiid.251557 - https://note.zhaoj.in/share/vo1KOw3EYmBK
CVE ID: CVE-2024-0735 State: PUBLISHED Published: 2024-01-19T21:00:05.551Z Last Updated: 2024-09-03T19:49:14.076Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Tours & Travels Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. Affected by this issue is the function exec of the file admin/operations/expense.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251558 is the identifier assigned to this vulnerability. Additional Analy
n disclosed to the public and may be used. VDB-251558 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251558 - https://vuldb.com/?ctiid.251558 - https://blog.csdn.net/DMZNX/article/details/135683738
CVE ID: CVE-2024-0736 State: PUBLISHED Published: 2024-01-19T21:00:07.187Z Last Updated: 2024-10-21T11:10:32.749Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: EFS Products: Easy File Sharing FTP Problem Types: CWE-404 Description: A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Login. The manipulation of the argument password leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251559. Additional Analyst Notes: - CVE Program Conta
ay be used. The associated identifier of this vulnerability is VDB-251559. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251559 - https://vuldb.com/?ctiid.251559 - https://0day.today/exploit/39249
CVE ID: CVE-2024-0737 State: PUBLISHED Published: 2024-01-19T21:31:03.973Z Last Updated: 2024-09-12T19:12:34.805Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Xlightftpd Products: Xlight FTP Server Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560. Additional Analyst Notes: - CVE Program Container: - CISA
be used. The identifier of this vulnerability is VDB-251560. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251560 - https://vuldb.com/?ctiid.251560 - https://packetstormsecurity.com/files/176553/LightFTP-1.1-Denial-Of-Service.html
CVE ID: CVE-2024-0738 State: PUBLISHED Published: 2024-01-19T21:31:05.055Z Last Updated: 2024-09-12T18:40:05.205Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 个人开源 Products: mldong Problem Types: CWE-94 Description: A vulnerability, which was classified as critical, has been found in 个人开源 mldong 1.0. This issue affects the function ExpressionEngine of the file com/mldong/modules/wf/engine/model/DecisionModel.java. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251561 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP
identifier VDB-251561 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251561 - https://vuldb.com/?ctiid.251561 - https://github.com/biantaibao/mldong_RCE/blob/main/RCE.md
CVE ID: CVE-2024-0739 State: PUBLISHED Published: 2024-01-19T22:00:04.670Z Last Updated: 2024-10-21T11:08:25.292Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Hecheng Products: Leadshop Problem Types: CWE-502 Description: A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Affected is an unknown function of the file /web/leadshop.php. The manipulation of the argument install leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-251562 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
2 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.251562 - https://vuldb.com/?ctiid.251562 - https://note.zhaoj.in/share/vLswXhWxUrs8
CVE ID: CVE-2024-0740 State: PUBLISHED Published: 2024-04-26T09:36:12.658Z Last Updated: 2024-08-01T18:18:17.860Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Eclipse Foundation Products: Eclipse Target Management Problem Types: CWE-78 Description: Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a remote code execution vulnerability that does not require authentication. The fixed version is included in Eclipse IDE 2024-03 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 - https://gitlab.eclipse.org/security/vulnerab
ner: References: - https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171
CVE ID: CVE-2024-0741 State: PUBLISHED Published: 2024-01-23T13:48:15.040Z Last Updated: 2025-05-30T14:19:32.233Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Out of bounds write in ANGLE Description: An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1864587 - https://www.mozilla.org/security/advisories/mfsa2024-01/ - https://www.mozilla.org/security/advisories/mfsa202
1864587 - https://www.mozilla.org/security/advisories/mfsa2024-01/ - https://www.mozilla.org/security/advisories/mfsa2024-02/ - https://www.mozilla.org/security/advisories/mfsa2024-04/ - https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
CVE ID: CVE-2024-0742 State: PUBLISHED Published: 2024-01-23T13:48:15.625Z Last Updated: 2025-05-30T14:19:26.249Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Failure to update user input timestamp Description: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1867152 - https://www.mozilla.org/security/advisories
chment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1867152 - https://www.mozilla.org/security/advisories/mfsa2024-01/ - https://www.mozilla.org/security/advisories/mfsa2024-02/ - https://www.mozilla.org/security/advisories/mfsa2024-04/ - https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
CVE ID: CVE-2024-0743 State: PUBLISHED Published: 2024-01-23T13:48:20.194Z Last Updated: 2025-11-03T21:51:02.736Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Crash in NSS TLS method Description: An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.9, and Thunderbird < 115.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1867408 - https://lists.debian.org/debian-lts-announce/2024/03/msg00010.html - https://www.mozilla.org/security/advisories/mfsa2024-01/ - https://www.m
org/debian-lts-announce/2024/03/msg00010.html - https://www.mozilla.org/security/advisories/mfsa2024-01/ - https://www.mozilla.org/security/advisories/mfsa2024-13/ - https://www.mozilla.org/security/advisories/mfsa2024-14/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html - https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html