Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6403 State: PUBLISHED Published: 2025-06-21T10:00:13.244Z Last Updated: 2025-06-23T15:04:17.748Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: School Fees Payment System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313397 - https://vuldb.com/?ctiid.313397 - https://vuldb.com/?submit.597758 - https://github.com/tuooo/CVE/issues/16 - https://code-projects.org/
CVE ID: CVE-2025-6404 State: PUBLISHED Published: 2025-06-21T12:00:13.366Z Last Updated: 2025-06-23T15:02:56.196Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Teacher Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Online Teacher Record Management System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313398 - https://vuldb.com/?ctiid.313398 - https://vuldb.com/?submit.598199 - https://github.com/ASantsSec/CVE/issues/13 - https://www.campcodes.com/
CVE ID: CVE-2025-6405 State: PUBLISHED Published: 2025-06-21T13:31:05.358Z Last Updated: 2025-06-23T14:59:25.924Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Teacher Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Online Teacher Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-teacher-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313399 - https://vuldb.com/?ctiid.313399 - https://vuldb.com/?submit.598200 - https://github.com/ASantsSec/CVE/issues/14 - https://www.campcodes.com/
CVE ID: CVE-2025-6406 State: PUBLISHED Published: 2025-06-21T14:00:16.004Z Last Updated: 2025-06-23T14:40:50.690Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313400 - https://vuldb.com/?ctiid.313400 - https://vuldb.com/?submit.598204 - https://github.com/ASantsSec/CVE/issues/11 - https://www.campcodes.com/
CVE ID: CVE-2025-6407 State: PUBLISHED Published: 2025-06-21T14:31:06.136Z Last Updated: 2025-06-23T14:40:13.442Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /user-login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313401 - https://vuldb.com/?ctiid.313401 - https://vuldb.com/?submit.598205 - https://github.com/ASantsSec/CVE/issues/12 - https://www.campcodes.com/
CVE ID: CVE-2025-6408 State: PUBLISHED Published: 2025-06-21T15:00:16.695Z Last Updated: 2025-06-23T14:39:31.051Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /doctor/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313402 - https://vuldb.com/?ctiid.313402 - https://vuldb.com/?submit.598207 - https://github.com/ASantsSec/CVE/issues/15 - https://www.campcodes.com/
CVE ID: CVE-2025-6409 State: PUBLISHED Published: 2025-06-21T16:00:14.749Z Last Updated: 2025-06-23T19:27:37.999Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313403 - https://vuldb.com/?ctiid.313403 - https://vuldb.com/?submit.598225 - https://github.com/f1rstb100d/myCVE/issues/82 - https://phpgurukul.com/
CVE ID: CVE-2025-6410 State: PUBLISHED Published: 2025-06-21T16:31:06.242Z Last Updated: 2025-06-23T19:27:32.814Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been classified as critical. Affected is an unknown function of the file /admin/edit-art-medium-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313404 - https://vuldb.com/?ctiid.313404 - https://vuldb.com/?submit.598226 - https://github.com/f1rstb100d/myCVE/issues/83 - https://phpgurukul.com/
CVE ID: CVE-2025-6411 State: PUBLISHED Published: 2025-06-21T17:00:17.094Z Last Updated: 2025-06-23T19:27:27.930Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/changepropic.php. The manipulation of the argument imageid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
hed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313405 - https://vuldb.com/?ctiid.313405 - https://vuldb.com/?submit.598227 - https://github.com/f1rstb100d/myCVE/issues/84 - https://phpgurukul.com/
CVE ID: CVE-2025-6412 State: PUBLISHED Published: 2025-06-21T17:31:08.375Z Last Updated: 2025-06-23T19:27:22.845Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313406 - https://vuldb.com/?ctiid.313406 - https://vuldb.com/?submit.598228 - https://github.com/f1rstb100d/myCVE/issues/85 - https://phpgurukul.com/
CVE ID: CVE-2025-6413 State: PUBLISHED Published: 2025-06-21T18:00:16.742Z Last Updated: 2025-06-23T14:38:43.945Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.1. This affects an unknown part of the file /admin/changeimage1.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313407 - https://vuldb.com/?ctiid.313407 - https://vuldb.com/?submit.598229 - https://github.com/f1rstb100d/myCVE/issues/86 - https://phpgurukul.com/
CVE ID: CVE-2025-6414 State: PUBLISHED Published: 2025-06-21T18:31:07.415Z Last Updated: 2025-06-23T14:38:05.334Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Art Gallery Management System 1.1. This vulnerability affects unknown code of the file /admin/changeimage2.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313408 - https://vuldb.com/?ctiid.313408 - https://vuldb.com/?submit.598230 - https://github.com/f1rstb100d/myCVE/issues/87 - https://phpgurukul.com/
CVE ID: CVE-2025-6415 State: PUBLISHED Published: 2025-06-21T19:00:15.829Z Last Updated: 2025-06-23T14:37:29.956Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.1. This issue affects some unknown processing of the file /admin/changeimage3.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313409 - https://vuldb.com/?ctiid.313409 - https://vuldb.com/?submit.598231 - https://github.com/f1rstb100d/myCVE/issues/88 - https://phpgurukul.com/
CVE ID: CVE-2025-6416 State: PUBLISHED Published: 2025-06-21T19:31:09.091Z Last Updated: 2025-06-23T14:36:55.981Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected is an unknown function of the file /admin/changeimage4.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313410 - https://vuldb.com/?ctiid.313410 - https://vuldb.com/?submit.598232 - https://github.com/f1rstb100d/myCVE/issues/89 - https://phpgurukul.com/
CVE ID: CVE-2025-6417 State: PUBLISHED Published: 2025-06-21T20:00:15.902Z Last Updated: 2025-06-23T14:36:20.157Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-artist.php. The manipulation of the argument awarddetails leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
ched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313411 - https://vuldb.com/?ctiid.313411 - https://vuldb.com/?submit.598233 - https://github.com/f1rstb100d/myCVE/issues/90 - https://phpgurukul.com/
CVE ID: CVE-2025-6418 State: PUBLISHED Published: 2025-06-21T20:31:06.728Z Last Updated: 2025-06-23T14:35:25.132Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit_query_account.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CI
k may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313412 - https://vuldb.com/?ctiid.313412 - https://vuldb.com/?submit.598243 - https://github.com/zzb1388/cve/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-6419 State: PUBLISHED Published: 2025-06-21T21:00:16.624Z Last Updated: 2025-06-23T14:34:47.001Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit_room.php. The manipulation of the argument room_type leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP V
he attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313413 - https://vuldb.com/?ctiid.313413 - https://vuldb.com/?submit.598245 - https://github.com/zzb1388/cve/issues/5 - https://code-projects.org/
CVE ID: CVE-2025-6420 State: PUBLISHED Published: 2025-06-21T21:31:06.860Z Last Updated: 2025-06-23T14:58:58.945Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add_room.php. The manipulation of the argument room_type leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
itiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313414 - https://vuldb.com/?ctiid.313414 - https://vuldb.com/?submit.598246 - https://github.com/zzb1388/cve/issues/6 - https://code-projects.org/
CVE ID: CVE-2025-6421 State: PUBLISHED Published: 2025-06-21T22:00:11.938Z Last Updated: 2025-06-23T14:53:12.254Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/add_account.php. The manipulation of the argument name/admin_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
y be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313415 - https://vuldb.com/?ctiid.313415 - https://vuldb.com/?submit.598247 - https://vuldb.com/?submit.598584 - https://github.com/zzb1388/cve/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-6422 State: PUBLISHED Published: 2025-06-21T22:31:07.614Z Last Updated: 2025-06-23T19:27:17.783Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Recruitment Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=save_settings of the component About Content Page. The manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may
leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313417 - https://vuldb.com/?ctiid.313417 - https://vuldb.com/?submit.598211 - https://github.com/Sp1d3rL1/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-6423 State: PUBLISHED Published: 2025-07-12T07:24:24.664Z Last Updated: 2025-07-14T20:12:26.577Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: beeteam368 Products: BeeTeam368 Extensions Problem Types: CWE-434 Description: The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_submit_upload_file() function in all versions up to, and including, 2.3.5. This makes it possible for authenticated attackers with Subscriber-level access or higher to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Not
load arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/96170b82-6ed9-4a52-8592-944163cdd3cf?source=cve - https://themeforest.net/item/vidmov-video-wordpress-theme/35542187#item-description__change-log
CVE ID: CVE-2025-6424 State: PUBLISHED Published: 2025-06-24T12:27:59.669Z Last Updated: 2025-11-03T20:06:57.283Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox < 140, Firefox ESR < 115.25, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1966423 - https://www.mozilla.org/security/advisories/mfsa2025-51/ - https://www.mozilla.org/security/advisories/mfsa2025-52/ - https://www.mozilla.org/security/advisori
ries/mfsa2025-51/ - https://www.mozilla.org/security/advisories/mfsa2025-52/ - https://www.mozilla.org/security/advisories/mfsa2025-53/ - https://www.mozilla.org/security/advisories/mfsa2025-54/ - https://www.mozilla.org/security/advisories/mfsa2025-55/
CVE ID: CVE-2025-6425 State: PUBLISHED Published: 2025-06-24T12:27:59.987Z Last Updated: 2025-11-03T20:07:00.354Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability affects Firefox < 140, Firefox ESR < 115.25, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1717672 - https://www.mozill
chment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1717672 - https://www.mozilla.org/security/advisories/mfsa2025-51/ - https://www.mozilla.org/security/advisories/mfsa2025-52/ - https://www.mozilla.org/security/advisories/mfsa2025-53/ - https://www.mozilla.org/security/advisories/mfsa2025-54/ - https://www.mozilla.org/security/advisories/mfsa2025-55/
CVE ID: CVE-2025-6426 State: PUBLISHED Published: 2025-06-24T12:28:00.614Z Last Updated: 2025-10-30T16:12:52.732Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1964385 - https://www.mozilla.org/security/advisories/mfsa2025-51/ - https://www.mozilla.org/security/advisor
bug.cgi?id=1964385 - https://www.mozilla.org/security/advisories/mfsa2025-51/ - https://www.mozilla.org/security/advisories/mfsa2025-53/ - https://www.mozilla.org/security/advisories/mfsa2025-54/ - https://www.mozilla.org/security/advisories/mfsa2025-55/