Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
equires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb25-57.html
CVE ID: CVE-2025-47112 State: PUBLISHED Published: 2025-06-10T19:11:32.882Z Last Updated: 2025-06-10T19:39:22.233Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hel
n that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb25-57.html
CVE ID: CVE-2025-47113 State: PUBLISHED Published: 2025-06-10T22:18:18.607Z Last Updated: 2025-06-11T14:53:01.150Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.a
CVE ID: CVE-2025-47114 State: PUBLISHED Published: 2025-06-10T22:19:56.441Z Last Updated: 2025-06-11T15:17:32.131Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.a
CVE ID: CVE-2025-47115 State: PUBLISHED Published: 2025-06-10T22:20:04.253Z Last Updated: 2025-06-11T15:16:30.730Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.a
CVE ID: CVE-2025-47116 State: PUBLISHED Published: 2025-06-10T22:19:14.145Z Last Updated: 2025-06-11T14:45:12.250Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.a
CVE ID: CVE-2025-47117 State: PUBLISHED Published: 2025-06-10T22:17:42.547Z Last Updated: 2025-06-11T14:57:58.813Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Adobe Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.a
CVE ID: CVE-2025-47119 State: PUBLISHED Published: 2025-07-08T22:11:09.242Z Last Updated: 2025-07-09T13:21:59.072Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-476 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
on in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47120 State: PUBLISHED Published: 2025-07-08T22:11:18.712Z Last Updated: 2025-07-09T19:19:32.518Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-121 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47121 State: PUBLISHED Published: 2025-07-08T22:11:13.057Z Last Updated: 2025-07-10T03:55:27.128Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-824 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47122 State: PUBLISHED Published: 2025-07-08T22:11:15.388Z Last Updated: 2025-07-10T03:55:30.071Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-122 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47123 State: PUBLISHED Published: 2025-07-08T22:11:07.715Z Last Updated: 2025-07-10T03:55:31.363Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-122 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47124 State: PUBLISHED Published: 2025-07-08T22:11:12.298Z Last Updated: 2025-07-10T03:55:18.447Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-787 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47125 State: PUBLISHED Published: 2025-07-08T22:11:08.479Z Last Updated: 2025-07-10T03:55:32.601Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-122 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47126 State: PUBLISHED Published: 2025-07-08T22:11:17.966Z Last Updated: 2025-07-10T03:55:17.157Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-787 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47127 State: PUBLISHED Published: 2025-07-08T22:11:11.015Z Last Updated: 2025-07-10T03:55:23.205Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-787 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47128 State: PUBLISHED Published: 2025-07-08T22:11:17.172Z Last Updated: 2025-07-10T03:55:24.453Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-191 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.htm
Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47129 State: PUBLISHED Published: 2025-07-08T22:11:09.978Z Last Updated: 2025-07-10T03:55:22.021Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-787 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47130 State: PUBLISHED Published: 2025-07-08T22:11:14.597Z Last Updated: 2025-07-10T03:55:25.697Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-191 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.htm
CVE ID: CVE-2025-47131 State: PUBLISHED Published: 2025-07-08T22:11:16.137Z Last Updated: 2025-07-10T03:55:33.678Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-122 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47132 State: PUBLISHED Published: 2025-07-08T22:11:06.894Z Last Updated: 2025-07-10T03:55:20.783Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-787 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47133 State: PUBLISHED Published: 2025-07-08T22:11:13.885Z Last Updated: 2025-07-10T03:55:19.649Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-787 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-66.html
CVE ID: CVE-2025-47134 State: PUBLISHED Published: 2025-07-08T21:49:01.174Z Last Updated: 2025-07-10T03:55:51.081Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-122 Description: InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-60.html
CVE ID: CVE-2025-47135 State: PUBLISHED Published: 2025-07-08T17:29:23.456Z Last Updated: 2025-07-08T17:52:20.471Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb25-63.html
CVE ID: CVE-2025-47136 State: PUBLISHED Published: 2025-07-08T21:49:00.379Z Last Updated: 2025-07-10T03:55:54.450Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-191 Description: InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-60.html
CVE ID: CVE-2025-47148 State: PUBLISHED Published: 2025-10-15T13:55:42.932Z Last Updated: 2025-10-16T03:56:50.380Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-404 Description: When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an access policy, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/m
l Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000148816
CVE ID: CVE-2025-47149 State: PUBLISHED Published: 2025-05-23T09:09:37.277Z Last Updated: 2025-05-23T12:31:36.694Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Digital Arts Inc. Products: i-FILTER Problem Types: CWE-348 Description: The optional feature 'Anti-Virus & Sandbox' of i-FILTER contains an issue with improper pattern file validation. If exploited, the product may treat an unauthorized pattern file as an authorized. If the product uses a specially crafted pattern file, information in the server where the product is running may be retrieved, and/or cause a denial of service (DoS) condition. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
e retrieved, and/or cause a denial of service (DoS) condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.daj.co.jp/support/detail/?page=releasenote_content&division=6&id=1057 - https://jvn.jp/en/jp/JVN68079883/
CVE ID: CVE-2025-47150 State: PUBLISHED Published: 2025-10-15T13:55:46.182Z Last Updated: 2025-10-16T03:56:52.662Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: F5OS - Appliance, F5OS - Chassis Problem Types: CWE-401 Description: When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000149820
CVE ID: CVE-2025-47151 State: PUBLISHED Published: 2025-11-05T14:57:01.436Z Last Updated: 2025-11-05T22:35:15.897Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Entr'ouvert Products: Lasso Problem Types: CWE-843 Description: A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr&#39;ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-
rogram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2193
CVE ID: CVE-2025-47152 State: PUBLISHED Published: 2025-08-05T14:49:25.514Z Last Updated: 2025-11-03T20:04:35.467Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: PDF-XChange Co. Ltd Products: PDF-XChange Editor Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.6.0.396. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligenc
tion. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2203
CVE ID: CVE-2025-47153 State: PUBLISHED Published: 2025-05-01T00:00:00.000Z Last Updated: 2025-05-02T19:02:41.441Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Debian Products: trixie Problem Types: CWE-1102 Description: Certain build processes for libuv and Node.js for 32-bit systems, such as for the nodejs binary package through nodejs_20.19.0+dfsg-2_i386.deb for Debian GNU/Linux, have an inconsistent off_t size (e.g., building on i386 Debian always uses _FILE_OFFSET_BITS=64 for the libuv dynamic library, but uses the _FILE_OFFSET_BITS global system default of 32 for nodejs), leading to out-of-bounds access. NOTE: this is not a problem in the Node.js so
global system default of 32 for nodejs), leading to out-of-bounds access. NOTE: this is not a problem in the Node.js software itself. In particular, the Node.js website's download page does not offer prebuilt Node.js for Linux on i386. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=892601 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922075 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1076350 - https://github.com/nodejs/node-v0.x-archive/issues/4549
CVE ID: CVE-2025-47154 State: PUBLISHED Published: 2025-05-01T00:00:00.000Z Last Updated: 2025-05-01T15:33:42.106Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Ladybird Products: Ladybird Problem Types: CWE-820 Description: LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for use by developers." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://news.ycombinator.com/item?id=43852096 - https://j
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://news.ycombinator.com/item?id=43852096 - https://jessie.cafe/posts/pwning-ladybirds-libjs/ - https://github.com/LadybirdBrowser/ladybird/commit/f5a670421954fc7130c3685b713c621b29516669
CVE ID: CVE-2025-47158 State: PUBLISHED Published: 2025-07-18T17:04:45.914Z Last Updated: 2025-08-23T00:40:41.475Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure DevOps Problem Types: CWE-302 Description: Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47158