Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-25717 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-10-21T23:15:27.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ruckuswireless.com/security_bulletins/315 - https://cybir.com/2023/cve/proof-of-concept-ruckus-wireless-admin-10-4-unauthenticated-remote-code-execution-csrf-ssrf/
CVE ID: CVE-2023-25718 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-06-19T20:35:05.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end user a (different) attacker-controlled executable file. It is plausible that the end user may allow the download and execution of this file to proceed. There are ConnectWise Control configuration options that add mitigations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Prog
ctWise Control configuration options that add mitigations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cybir.com/2022/cve/connectwise-control-dns-spoofing-poc/ - https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures - https://m.youtube.com/watch?v=fbNVUgmstSc&pp=0gcJCf0Ao7VqN5tD
CVE ID: CVE-2023-25719 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-06-19T20:35:43.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector. NOTE: this CVE Record is only about the parameters, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed
s, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed to have unique configurations across customers' installations). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cybir.com/2022/cve/hijacking-connectwise-control-and-ddos/ - https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures - https://m.youtube.com/watch?v=fbNVUgmstSc&pp=0gcJCf0Ao7VqN5tD
CVE ID: CVE-2023-25721 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T18:33:48.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veracode Scan Jenkins Plugin before 23.3.19.0, when the "Connect using proxy" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users (with access to view the job log) to discover proxy credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://veracode.com - https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190
CVE ID: CVE-2023-25722 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T18:30:26.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: A credential-leak issue was discovered in related Veracode products before 2023-03-27. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access of the Jenkins remote) to discover Veracode API credentials by listing the process and its arguments. Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs and when the "Connect using proxy" option is enabled and configured wi
23.3.19.0, when configured for remote agent jobs and when the "Connect using proxy" option is enabled and configured with proxy credentials, allows local users of the Jenkins remote to discover proxy credentials by listing the process and its arguments. Veracode Azure DevOps Extension before 3.20.0 invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access to the Azure DevOps Services cloud infrastructure or Azure DevOps Server) to discover Veracode API credentials by listing the process and its arguments. Veracode Azure DevOps Extension before 3.20.0, when configured with proxy credentials, allows users (with shell access to the Azure DevOps Services cl
n before 3.20.0, when configured with proxy credentials, allows users (with shell access to the Azure DevOps Services cloud infrastructure or Azure DevOps Server) to discover proxy credentials by listing the process and its arguments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://veracode.com - https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190
CVE ID: CVE-2023-25723 State: REJECTED Published: N/A Last Updated: 2023-02-14T00:00:00 Description: No description available.
CVE ID: CVE-2023-25724 State: REJECTED Published: N/A Last Updated: 2023-02-14T00:00:00 Description: No description available.
CVE ID: CVE-2023-25725 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T19:14:03.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empty header field names, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1. For HTTP/2 and HTTP/3, the impact is limited because the headers disappear before being parsed and processed, as if they had not been sent by the clien
ct is limited because the headers disappear before being parsed and processed, as if they had not been sent by the client. The fixed versions are 2.7.3, 2.6.9, 2.5.12, 2.4.22, 2.2.29, and 2.0.31. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.haproxy.org/ - https://git.haproxy.org/?p=haproxy-2.7.git%3Ba=commit%3Bh=a0e561ad7f29ed50c473f5a9da664267b60d1112 - https://lists.debian.org/debian-lts-announce/2023/02/msg00012.html - https://www.debian.org/security/2023/dsa-5348 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPTJQHKUEU2PQ7RWFUYAFLAD4STEIKHU/ - https://lists.fedoraproject.org/arch
kage-announce%40lists.fedoraproject.org/message/FPTJQHKUEU2PQ7RWFUYAFLAD4STEIKHU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JM5NCIBTHYDTLPY2UNC4HO2VAHHE6CJG/
CVE ID: CVE-2023-25727 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-11-03T19:28:04.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpmyadmin.net/security/PMASA-2023-1/
CVE ID: CVE-2023-25728 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T17:40:06.122Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Content security policy leak in violation reports using iframes Description: The <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.o
- CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1790345
CVE ID: CVE-2023-25729 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T17:35:40.802Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Extensions could have opened external schemes without user knowledge Description: Permission prompts for opening external schemes were only shown for <code>ContentPrincipals</code> resulting in extensions being able to open them without user interaction via <code>ExpandedPrincipals</code>. This could lead to further malicious actions such as downloading files or interacting with software already installed on the system. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Ad
eady installed on the system. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1792138
CVE ID: CVE-2023-25730 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T17:32:54.948Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Screen hijack via browser fullscreen mode Description: A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://ww
Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1794622
CVE ID: CVE-2023-25731 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T17:28:39.783Z Vendors: Mozilla Products: Firefox Problem Types: Prototype pollution when rendering URLPreview Description: Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1801542
CVE ID: CVE-2023-25732 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T21:12:17.935Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Out of bounds memory write from EncodeInputStream Description: When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.o
- CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1804564
CVE ID: CVE-2023-25733 State: PUBLISHED Published: 2023-06-19T10:22:03.034Z Last Updated: 2024-12-11T16:15:41.362Z Vendors: Mozilla Products: Firefox Problem Types: Possible null pointer dereference in TaskbarPreviewCallback Description: The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox < 110. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1808632 - https://www.mozilla.org/security/advisories/mfsa2023-05/
CVE ID: CVE-2023-25734 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T21:03:44.768Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Opening local .url files could cause unexpected network loads Description: After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8
erating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1809923 - https://bugzilla.mozilla.org/show_bug.cgi?id=1784451 - https://bugzilla.mozilla.org/show_bug.cgi?id=1810143 - https://bugzilla.mozilla.org/show_bug.cgi?id=1812338
CVE ID: CVE-2023-25735 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T20:59:26.346Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Potential use-after-free from compartment mismatch in SpiderMonkey Description: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ -
CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1810711
CVE ID: CVE-2023-25736 State: PUBLISHED Published: 2023-06-19T10:22:11.713Z Last Updated: 2024-12-11T16:18:31.099Z Vendors: Mozilla Products: Firefox Problem Types: Invalid downcast in GetTableSelectionMode Description: An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affects Firefox < 110. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1811331 - https://www.mozilla.org/security/advisories/mfsa2023-05/
CVE ID: CVE-2023-25737 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T20:12:10.226Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Invalid downcast in SVGUtils::SetupStrokeGeometry Description: An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisor
ories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1811464
CVE ID: CVE-2023-25738 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T20:08:25.085Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Printing on Windows could potentially crash Firefox with some device drivers Description: Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional An
are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1811852
CVE ID: CVE-2023-25739 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T20:05:55.495Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext Description: Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext</code>. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advi
richment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1811939
CVE ID: CVE-2023-25740 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T20:03:25.772Z Vendors: Mozilla Products: Firefox Problem Types: Opening local .scf files could cause unexpected network loads Description: After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM credentials to the resource.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
ted.*. This vulnerability affects Firefox < 110. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1812354
CVE ID: CVE-2023-25741 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T19:59:03.100Z Vendors: Mozilla Products: Firefox Problem Types: Same-origin policy leak via image drag and drop Description: When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox < 110. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://bugzilla.mozilla.org/show_bu
nrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1813376 - https://bugzilla.mozilla.org/show_bug.cgi?id=1437126 - https://bugzilla.mozilla.org/show_bug.cgi?id=1812611
CVE ID: CVE-2023-25742 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T16:16:03.546Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Web Crypto ImportKey crashes tab Description: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/
6/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1813424
CVE ID: CVE-2023-25743 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T16:13:10.172Z Vendors: Mozilla Products: Firefox, Firefox ESR Problem Types: Fullscreen notification not shown in Firefox Focus Description: A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome.<br>*This bug only affects Firefox Focus. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisor
hment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1800203
CVE ID: CVE-2023-25744 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T16:11:13.434Z Vendors: Mozilla Products: Firefox, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 Description: Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110 and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.m
ntainer: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1789449%2C1803628%2C1810536
CVE ID: CVE-2023-25745 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T19:44:55.550Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 110 Description: Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-05/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1688592%2C1797186%2C1804998%2C1806521%2C1813284