Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309452 - https://vuldb.com/?ctiid.309452 - https://vuldb.com/?submit.578034 - https://github.com/byxs0x0/cve2/blob/main/Tenda%20AC10.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4897 State: PUBLISHED Published: 2025-05-18T21:31:06.291Z Last Updated: 2025-05-19T14:06:27.061Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: A15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309453 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309453 - https://vuldb.com/?ctiid.309453 - https://vuldb.com/?submit.578035 - https://github.com/byxs0x0/cve2/blob/main/tenda%20AC15.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4898 State: PUBLISHED Published: 2025-05-18T22:00:08.421Z Last Updated: 2025-05-19T14:02:56.576Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-22 Description: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file update_system.php of the component Logo File Handler. The manipulation of the argument old_logo leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309454 - https://vuldb.com/?ctiid.309454 - https://vuldb.com/?submit.578036 - https://magnificent-dill-351.notion.site/Arbitrary-File-Delete-in-SRMS-1-0-1f4c693918ed80de80b0e7925ddbdadc - https://www.sourcecodester.com/
CVE ID: CVE-2025-4899 State: PUBLISHED Published: 2025-05-18T22:31:05.176Z Last Updated: 2025-05-19T14:02:19.349Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transaction_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309455 - https://vuldb.com/?ctiid.309455 - https://vuldb.com/?submit.578040 - https://github.com/RoyalZJT/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-4900 State: PUBLISHED Published: 2025-05-18T23:00:11.016Z Last Updated: 2025-05-19T14:01:41.581Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/payment.php. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309456 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309456 - https://vuldb.com/?ctiid.309456 - https://vuldb.com/?submit.578041 - https://github.com/RoyalZJT/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-4901 State: PUBLISHED Published: 2025-05-18T23:31:04.835Z Last Updated: 2025-05-19T14:01:07.425Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-200, CWE-284 Description: A vulnerability classified as problematic was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this vulnerability is the function sub_41E304 of the file /H5/state_view.data of the component HTTP Endpoint. The manipulation leads to information disclosure. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
network. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309457 - https://vuldb.com/?ctiid.309457 - https://vuldb.com/?submit.578049 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/state_view.md - https://www.dlink.com/
CVE ID: CVE-2025-4902 State: PUBLISHED Published: 2025-05-19T00:00:08.280Z Last Updated: 2025-05-19T14:00:13.845Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-200, CWE-284 Description: A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected by this issue is the function sub_48F4F0 of the file /H5/versionupdate.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309458 - https://vuldb.com/?ctiid.309458 - https://vuldb.com/?submit.578050 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/versionupdate.md - https://www.dlink.com/
CVE ID: CVE-2025-4903 State: PUBLISHED Published: 2025-05-19T00:31:04.582Z Last Updated: 2025-05-19T15:21:59.622Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-620, CWE-640 Description: A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This affects the function sub_41F4F0 of the file /H5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restart. The manipulation leads to unverified password change. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes
to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309459 - https://vuldb.com/?ctiid.309459 - https://vuldb.com/?submit.578051 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/webgl_asp.md - https://www.dlink.com/
CVE ID: CVE-2025-4904 State: PUBLISHED Published: 2025-05-19T01:00:07.639Z Last Updated: 2025-05-19T15:21:54.142Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-200, CWE-284 Description: A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. This vulnerability affects the function sub_41F0FC of the file /H5/webgl.data. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309460 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309460 - https://vuldb.com/?ctiid.309460 - https://vuldb.com/?submit.578052 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/webgl_data.md - https://www.dlink.com/
CVE ID: CVE-2025-4905 State: PUBLISHED Published: 2025-05-19T01:31:04.562Z Last Updated: 2025-05-19T13:53:00.332Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: iop-apl-uw Products: basestation3 Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function load_qc_pickl of the file basestation3/QC.py. The manipulation of the argument qc_file leads to deserialization. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The code maintainer tagged the issue as closed. But there is no new commit nor rele
losed to the public and may be used. The code maintainer tagged the issue as closed. But there is no new commit nor release in the GitHub repository available so far. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309461 - https://vuldb.com/?ctiid.309461 - https://vuldb.com/?submit.578074 - https://github.com/iop-apl-uw/basestation3/issues/6 - https://github.com/iop-apl-uw/basestation3/issues/6#event-17672013757 - https://github.com/iop-apl-uw/basestation3/issues/6#issue-3066055868
CVE ID: CVE-2025-4906 State: PUBLISHED Published: 2025-05-19T02:00:19.856Z Last Updated: 2025-05-19T13:51:40.588Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Notice Board System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Notice Board System 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309462 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309462 - https://vuldb.com/?ctiid.309462 - https://vuldb.com/?submit.578086 - https://github.com/6BXK6/cve/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4907 State: PUBLISHED Published: 2025-05-19T02:31:05.806Z Last Updated: 2025-05-19T13:51:05.229Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Daily Expense Tracker System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309464 - https://vuldb.com/?ctiid.309464 - https://vuldb.com/?submit.578194 - https://github.com/f1rstb100d/myCVE/issues/22 - https://phpgurukul.com/
CVE ID: CVE-2025-4908 State: PUBLISHED Published: 2025-05-19T03:00:09.440Z Last Updated: 2025-05-19T13:49:22.414Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Daily Expense Tracker System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309465 - https://vuldb.com/?ctiid.309465 - https://vuldb.com/?submit.578254 - https://github.com/f1rstb100d/myCVE/issues/23 - https://phpgurukul.com/
CVE ID: CVE-2025-4909 State: PUBLISHED Published: 2025-05-19T03:31:04.997Z Last Updated: 2025-05-19T13:47:28.705Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Client Database Management System Problem Types: CWE-548, CWE-552 Description: A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309466 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309466 - https://vuldb.com/?ctiid.309466 - https://vuldb.com/?submit.578723 - https://github.com/dengxun628/cve/issues/3 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4910 State: PUBLISHED Published: 2025-05-19T04:00:08.537Z Last Updated: 2025-05-19T13:46:30.823Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/edit-animal-details.php. The manipulation of the argument aname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP V
closed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309467 - https://vuldb.com/?ctiid.309467 - https://vuldb.com/?submit.578749 - https://github.com/xiguala123/myCVE/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-4911 State: PUBLISHED Published: 2025-05-19T04:31:06.619Z Last Updated: 2025-05-19T14:08:11.268Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/view-foreigner-ticket.php. The manipulation of the argument viewid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309468 - https://vuldb.com/?ctiid.309468 - https://vuldb.com/?submit.578751 - https://github.com/xiguala123/myCVE/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-4912 State: PUBLISHED Published: 2025-05-19T05:00:08.672Z Last Updated: 2025-05-19T13:44:02.087Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-22 Description: A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/core/update_student.php of the component Image File Handler. The manipulation of the argument old_photo leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional A
aversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309469 - https://vuldb.com/?ctiid.309469 - https://vuldb.com/?submit.579089 - https://magnificent-dill-351.notion.site/Arbitrary-File-Delete-of-update_student-in-SRMS-1-0-1f5c693918ed8047ad31d03c6034b4f6 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4913 State: PUBLISHED Published: 2025-05-19T05:31:06.374Z Last Updated: 2025-05-19T13:42:41.487Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Auto Taxi Stand Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309470 - https://vuldb.com/?ctiid.309470 - https://vuldb.com/?submit.579095 - https://github.com/Pjwww13447/pjwww/issues/15 - https://phpgurukul.com/
CVE ID: CVE-2025-4914 State: PUBLISHED Published: 2025-05-19T06:00:07.968Z Last Updated: 2025-05-19T16:07:01.766Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Auto Taxi Stand Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309471 - https://vuldb.com/?ctiid.309471 - https://vuldb.com/?submit.579096 - https://github.com/Pjwww13447/pjwww/issues/16 - https://phpgurukul.com/
CVE ID: CVE-2025-4915 State: PUBLISHED Published: 2025-05-19T06:31:05.140Z Last Updated: 2025-05-27T20:28:35.404Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Auto Taxi Stand Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/auto-taxi-entry-detail.php. The manipulation of the argument price leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309472 - https://vuldb.com/?ctiid.309472 - https://vuldb.com/?submit.579097 - https://github.com/Pjwww13447/pjwww/issues/17 - https://phpgurukul.com/
CVE ID: CVE-2025-4916 State: PUBLISHED Published: 2025-05-19T07:00:07.720Z Last Updated: 2025-05-19T16:05:38.631Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Auto Taxi Stand Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Not
oit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309473 - https://vuldb.com/?ctiid.309473 - https://vuldb.com/?submit.579098 - https://github.com/Pjwww13447/pjwww/issues/18 - https://phpgurukul.com/
CVE ID: CVE-2025-4917 State: PUBLISHED Published: 2025-05-19T07:31:05.971Z Last Updated: 2025-05-19T16:02:11.474Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Auto Taxi Stand Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is an unknown function of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument drivername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst
exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309474 - https://vuldb.com/?ctiid.309474 - https://vuldb.com/?submit.579100 - https://github.com/Pjwww13447/pjwww/issues/19 - https://phpgurukul.com/
CVE ID: CVE-2025-4918 State: PUBLISHED Published: 2025-05-17T21:07:26.745Z Last Updated: 2025-11-03T20:05:17.591Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Out-of-bounds access when resolving Promise objects Description: An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1966612 - https://www.mozilla.org/security/advisories/mfsa2025-36/ -
ces: - https://bugzilla.mozilla.org/show_bug.cgi?id=1966612 - https://www.mozilla.org/security/advisories/mfsa2025-36/ - https://www.mozilla.org/security/advisories/mfsa2025-37/ - https://www.mozilla.org/security/advisories/mfsa2025-38/ - https://www.mozilla.org/security/advisories/mfsa2025-40/ - https://www.mozilla.org/security/advisories/mfsa2025-41/
CVE ID: CVE-2025-4919 State: PUBLISHED Published: 2025-05-17T21:07:27.734Z Last Updated: 2025-11-03T20:05:22.225Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Out-of-bounds access when optimizing linear sums Description: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1966614 - https://www.mozilla.org/security/advisor
Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1966614 - https://www.mozilla.org/security/advisories/mfsa2025-36/ - https://www.mozilla.org/security/advisories/mfsa2025-37/ - https://www.mozilla.org/security/advisories/mfsa2025-38/ - https://www.mozilla.org/security/advisories/mfsa2025-40/ - https://www.mozilla.org/security/advisories/mfsa2025-41/
CVE ID: CVE-2025-4920 State: REJECTED Published: 2025-05-17T21:07:23.879Z Last Updated: 2025-05-18T19:21:27.592Z Description: No description available.
CVE ID: CVE-2025-4921 State: REJECTED Published: 2025-05-17T21:07:25.676Z Last Updated: 2025-05-18T19:22:40.758Z Description: No description available.