Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-6852 State: PUBLISHED Published: 2023-12-16T11:31:03.827Z Last Updated: 2024-08-02T08:42:07.824Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: kalcaddle Products: KodExplorer Problem Types: CWE-918 Description: A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03. Affected is an unknown function of the file plugins/webodf/app.php. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.52.01 is able to address this issue. The name of the patch is 5cf233f7556b442100cf67b5e92d57ceabb126c6. It is
version 4.52.01 is able to address this issue. The name of the patch is 5cf233f7556b442100cf67b5e92d57ceabb126c6. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248220. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248220 - https://vuldb.com/?ctiid.248220 - https://note.zhaoj.in/share/P6lQNyqQn3zY - https://github.com/kalcaddle/KodExplorer/commit/5cf233f7556b442100cf67b5e92d57ceabb126c6 - https://github.com/kalcaddle/KodExplorer/releases/tag/4.52.01
CVE ID: CVE-2023-6853 State: PUBLISHED Published: 2023-12-16T12:00:05.380Z Last Updated: 2025-05-07T20:42:06.694Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: kalcaddle Products: KodExplorer Problem Types: CWE-918 Description: A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03. Affected by this vulnerability is the function index of the file plugins/officeLive/app.php. The manipulation of the argument path leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.52.01 is able to address this issue. The identifier of the patch is 5cf233f75
ic and may be used. Upgrading to version 4.52.01 is able to address this issue. The identifier of the patch is 5cf233f7556b442100cf67b5e92d57ceabb126c6. It is recommended to upgrade the affected component. The identifier VDB-248221 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.248221 - https://vuldb.com/?ctiid.248221 - https://note.zhaoj.in/share/oaYHbDTnPiU3 - https://github.com/kalcaddle/KodExplorer/commit/5cf233f7556b442100cf67b5e92d57ceabb126c6 - https://github.com/kalcaddle/KodExplorer/releases/tag/4.52.01
CVE ID: CVE-2023-6854 State: PUBLISHED Published: 2024-05-06T11:03:50.325Z Last Updated: 2024-08-02T08:42:08.415Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Breakdance Products: Breakdance Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping on user supplied post meta fields. This makes it possible for authenticated attackers with contributor-level and above permissio
supplied post meta fields. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e92a0387-bd09-46d3-9f6c-09f701b9e550?source=cve - https://breakdance.com/breakdance-1-7-1-now-available-security-update/
CVE ID: CVE-2023-6855 State: PUBLISHED Published: 2024-01-11T08:32:31.855Z Last Updated: 2025-06-03T14:09:46.500Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: strangerstudios Products: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Problem Types: CWE-862 Missing Authorization Description: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to unauthorized modification of membership levels created by the plugin due to an incorrectly implemented capability check in the pmpro_rest_api_get_permissions_check function in all versions up to 2.12.5 (inclusi
implemented capability check in the pmpro_rest_api_get_permissions_check function in all versions up to 2.12.5 (inclusive). This makes it possible for unauthenticated attackers to change membership levels including prices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/383c7837-e7b7-4608-9cdc-91b7dbc7f4e2?source=cve - https://plugins.trac.wordpress.org/browser/paid-memberships-pro/trunk/includes/rest-api.php#L528 - https://plugins.trac.wordpress.org/browser/paid-memberships-pro/trunk/includes/rest-api.php#L997 - https://plugins.trac.wordpress.org/changeset/3011575/paid-memberships-pro/trunk/
-pro/trunk/includes/rest-api.php#L997 - https://plugins.trac.wordpress.org/changeset/3011575/paid-memberships-pro/trunk/includes/rest-api.php?contextall=1&old=2947813&old_path=%2Fpaid-memberships-pro%2Ftrunk%2Fincludes%2Frest-api.php
CVE ID: CVE-2023-6856 State: PUBLISHED Published: 2023-12-19T13:38:36.493Z Last Updated: 2025-02-13T17:26:33.802Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver Description: The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi
irefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1843782 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://www.debian.org/security/2023/dsa-5582 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6857 State: PUBLISHED Published: 2023-12-19T13:38:37.621Z Last Updated: 2025-02-13T17:26:34.338Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Symlinks may resolve to smaller than expected buffers Description: When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. *This bug only affects Firefox on Unix-based operating systems (Android, Linux, MacOS). Windows is unaffected.* This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1796023 - ht
ditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1796023 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://www.debian.org/security/2023/dsa-5582 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6858 State: PUBLISHED Published: 2023-12-19T13:38:38.757Z Last Updated: 2025-05-07T20:25:21.051Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Heap buffer overflow in nsTextFragment Description: Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1826791 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - htt
ttps://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://www.debian.org/security/2023/dsa-5582 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6859 State: PUBLISHED Published: 2023-12-19T13:38:39.872Z Last Updated: 2025-02-13T17:26:35.464Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Use-after-free in PR_GetIdentitiesLayer Description: A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1840144 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfs
fsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://www.debian.org/security/2023/dsa-5582 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6860 State: PUBLISHED Published: 2023-12-19T13:38:40.956Z Last Updated: 2025-02-13T17:26:36.069Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Potential sandbox escape due to VideoBridge lack of texture validation Description: The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1854669 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/
ozilla.org/show_bug.cgi?id=1854669 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://www.debian.org/security/2023/dsa-5582 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6861 State: PUBLISHED Published: 2023-12-19T13:38:42.037Z Last Updated: 2025-02-13T17:26:36.616Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode Description: The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1864118 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories
.cgi?id=1864118 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://www.debian.org/security/2023/dsa-5582 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6862 State: PUBLISHED Published: 2023-12-19T13:38:43.100Z Last Updated: 2025-02-13T17:26:37.198Z Vendors: Mozilla Products: Firefox ESR, Thunderbird Problem Types: Use-after-free in nsDNSService Description: A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 115.6 and Thunderbird < 115.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1868042 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.debian.org/s
g/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.debian.org/security/2023/dsa-5581 - https://www.debian.org/security/2023/dsa-5582 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6863 State: PUBLISHED Published: 2023-12-19T13:38:44.181Z Last Updated: 2025-02-13T17:26:37.799Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Undefined behavior in ShutdownObserver() Description: The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1868901 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisorie
g.cgi?id=1868901 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6864 State: PUBLISHED Published: 2023-12-19T13:38:45.300Z Last Updated: 2024-08-02T08:42:07.641Z Vendors: Mozilla Products: Firefox ESR, Thunderbird, Firefox Problem Types: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 Description: Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mo
derbird < 115.6, and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1736385%2C1810805%2C1846328%2C1856090%2C1858033%2C1858509%2C1862089%2C1862777%2C1864015 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10 - https://www.debian.org/security/2023/dsa-5581 - https://www.debian.org/security/2023/dsa-5582 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-55/ - https://www.mozilla.org/security/advisories/mfsa2023-56/
CVE ID: CVE-2023-6865 State: PUBLISHED Published: 2023-12-19T13:38:47.449Z Last Updated: 2025-02-13T17:26:38.713Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Potential exposure of uninitialized data in EncryptingOutputStream Description: `EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1864123 - https://www.mozilla.org/security/advisories/mfsa2023-54/ -
ces: - https://bugzilla.mozilla.org/show_bug.cgi?id=1864123 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6866 State: PUBLISHED Published: 2023-12-19T13:38:48.512Z Last Updated: 2025-02-13T17:26:39.281Z Vendors: Mozilla Products: Firefox Problem Types: TypedArrays lack sufficient exception handling Description: TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1849037 - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6867 State: PUBLISHED Published: 2023-12-19T13:38:49.592Z Last Updated: 2025-02-13T17:26:39.927Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Clickjacking permission prompts using the popup transition Description: The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzil
Firefox < 121. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1863863 - https://www.mozilla.org/security/advisories/mfsa2023-54/ - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5581 - https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6868 State: PUBLISHED Published: 2023-12-19T13:38:50.669Z Last Updated: 2025-02-13T17:26:40.464Z Vendors: Mozilla Products: Firefox Problem Types: WebPush requests on Firefox for Android did not require VAPID key Description: In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subscription defined one. This could allow empty messages to be sent from unauthorized parties. *This bug only affects Firefox on Android.* This vulnerability affects Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1865488 - https://www.mozilla.org/security/adviso
Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1865488 - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6869 State: PUBLISHED Published: 2023-12-19T13:38:51.751Z Last Updated: 2025-05-07T20:23:58.917Z Vendors: Mozilla Products: Firefox Problem Types: Content can paint outside of sandboxed iframe Description: A `&lt;dialog>` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox < 121. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1799036 - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6870 State: PUBLISHED Published: 2023-12-19T13:38:52.848Z Last Updated: 2025-02-13T17:26:41.593Z Vendors: Mozilla Products: Firefox Problem Types: Android Toast notifications may obscure fullscreen event notifications Description: Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. *This issue only affects Android versions of Firefox and Firefox Focus.* This vulnerability affects Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1823316 - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://security.gentoo.
ozilla.org/show_bug.cgi?id=1823316 - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6871 State: PUBLISHED Published: 2023-12-19T13:38:53.927Z Last Updated: 2024-08-02T08:42:07.918Z Vendors: Mozilla Products: Firefox Problem Types: Lack of protocol handler warning in some instances Description: Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1828334 - https://security.gentoo.org/glsa/202401-10 - https://www.mozilla.org/security/advisories/mfsa2023-56/
CVE ID: CVE-2023-6872 State: PUBLISHED Published: 2023-12-19T13:38:54.985Z Last Updated: 2025-02-13T17:26:57.365Z Vendors: Mozilla Products: Firefox Problem Types: Browsing history leaked to syslogs via GNOME Description: Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users running in a private tab. This vulnerability affects Firefox < 121. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1849186 - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6873 State: PUBLISHED Published: 2023-12-19T13:38:56.039Z Last Updated: 2025-02-13T17:26:57.948Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 121 Description: Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 121. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1855327%2C1862089%2C1862723 - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/d
%2C1862089%2C1862723 - https://www.mozilla.org/security/advisories/mfsa2023-56/ - https://www.debian.org/security/2023/dsa-5582 - https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-6874 State: PUBLISHED Published: 2024-02-05T17:39:43.291Z Last Updated: 2024-09-25T16:10:32.932Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: silabs.com Products: GSDK Problem Types: CWE-312 Description: Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SiliconLabs/gecko_sdk - https://community.silabs.com/069Vm000000WXaOIAW