deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-7698
Published: 2025-09-29
Description: Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://canon.jp/support/support-info/250925vulnerability-response; https://psirt.canon/advisory-information/cp2025-005/; https://www.canon-europe.com/support/product-security/
CVE: CVE-2025-9903
Published: 2025-09-29
Description: Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: https://canon.jp/support/support-info/250925vulnerability-response; https://psirt.canon/advisory-information/cp2025-005/; https://www.canon-europe.com/support/product-security/
CVE: CVE-2025-9904
Published: 2025-09-29
Description: Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-696
References: https://canon.jp/support/support-info/250925vulnerability-response; https://psirt.canon/advisory-information/cp2025-005/; https://www.canon-europe.com/support/product-security/
CVE: CVE-2025-11135
Published: 2025-09-29
Description: A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The affected element is the function loadLanguage of the file classes/class.database.php of the component Cookie Handler. Performing manipulation of the argument user_id results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-502
References: https://asciinema.org/a/kTWHQMM7n6QH98gGCW3e7T9xT; https://drive.google.com/file/d/18T4Gpzic0OQ-hzZWR6YoJ127QV3Jxyxe/view; https://vuldb.com/?ctiid.326212
CVE: CVE-2025-11136
Published: 2025-09-29
Description: A flaw has been found in YiFang CMS up to 2.0.2. The impacted element is the function webUploader of the file app/app/controller/File.php of the component Backend. Executing manipulation of the argument uploadpath can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://github.com/electroN1chahaha/YifangCMS-V2.0.0-Remote-Code-Execution-RCE-/issues/1; https://vuldb.com/?ctiid.326213; https://vuldb.com/?id.326213
CVE: CVE-2025-11137
Published: 2025-09-29
Description: A vulnerability has been found in Gstarsoft GstarCAD up to 9.4.0. This affects an unknown function of the component File Renaming Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Applying a patch is the recommended action to fix this issue.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/coolcj-stack/-CAD-GstarCAD-Viewer-Web-V9.4.0-Stored-Cross-Site-Scripting-XSS; https://vuldb.com/?ctiid.326214; https://vuldb.com/?id.326214
CVE: CVE-2025-11138
Published: 2025-09-29
Description: A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://github.com/electroN1chahaha/wenkucms-RCE/issues/1; https://vuldb.com/?ctiid.326215; https://vuldb.com/?id.326215
CVE: CVE-2025-11139
Published: 2025-09-29
Description: A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/FightingLzn9/vul/blob/main/%E6%97%B6%E7%A9%BA%E6%99%BA%E5%8F%8Berp-2.md; https://vuldb.com/?ctiid.326216; https://vuldb.com/?id.326216
CVE: CVE-2025-11140
Published: 2025-09-29
Description: A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this vulnerability is the function openForm of the component com.artery.richclient.RichClientService. Such manipulation of the argument contentString leads to xml external entity reference. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-610, CWE-611, CWE-611
References: https://github.com/FightingLzn9/vul/blob/main/%E6%97%B6%E7%A9%BA%E6%99%BA%E5%8F%8Berp-3.md; https://vuldb.com/?ctiid.326217; https://vuldb.com/?id.326217
CVE: CVE-2025-10504
Published: 2025-09-29
Description: Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-122
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A8107&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2025-11141
Published: 2025-09-29
Description: A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itbox_pi/branch_passw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://github.com/DavCloudz/cve/issues/2; https://vuldb.com/?ctiid.326218; https://vuldb.com/?id.326218
CVE: CVE-2024-5200
Published: 2025-09-29
Description: The Postie WordPress plugin before 1.9.71 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/4a517cf0-886a-47f1-a433-54a2288b2851/
CVE: CVE-2025-48006
Published: 2025-09-29
Description: Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a specially crafted request is processed, arbitrary files on the file system where the server application for the product is installed may be read, or a denial-of-service (DoS) condition may occur.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://jvn.jp/en/jp/JVN23423519/; https://www.hulft.com/application/files/1217/5885/0217/information_20250926.pdf
CVE: CVE-2025-10341
Published: 2025-09-29
Description: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a 
stored HTML injection due to lack of proper validation of user input by 
sending a POST request in the parameter 'company' at the endpoint '/clients/client/x.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-perfex-crm
CVE: CVE-2025-10342
Published: 2025-09-29
Description: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a 
stored HTML injection due to lack of proper validation of user input by 
sending a POST request in the parameter 'name' at the endpoint '/subscriptions/create'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-perfex-crm
CVE: CVE-2025-10343
Published: 2025-09-29
Description: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a 
stored HTML injection due to lack of proper validation of user input by 
sending a POST request in the parameter 'expense_name' at the endpoint '/expenses/expense'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-perfex-crm
CVE: CVE-2025-10344
Published: 2025-09-29
Description: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a 
stored HTML injection due to lack of proper validation of user input by 
sending a POST request in the parameters 'name' and 'clientid' at the endpoint '/projects/project/x'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-perfex-crm
CVE: CVE-2025-10345
Published: 2025-09-29
Description: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a 
stored HTML injection due to lack of proper validation of user input by 
sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-perfex-crm
CVE: CVE-2025-10346
Published: 2025-09-29
Description: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a 
stored HTML injection due to lack of proper validation of user input by 
sending a POST request in the parameters 'subject' at the endpoint 'knoewledge_base/article'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-perfex-crm
CVE: CVE-2025-11146
Published: 2025-09-29
Description: Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts (XSS) in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-apt-cacher-ng
CVE: CVE-2025-11147
Published: 2025-09-29
Description: Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts (XSS) to be executed in “/html/<filename>.html”.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-apt-cacher-ng
CVE: CVE-2025-11150
Published: 2025-09-29
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-6724
Published: 2025-09-29
Description: In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://docs.chef.io/release_notes_automate/#4.13.295
CVE: CVE-2025-8868
Published: 2025-09-29
Description: In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via 

improperly neutralized inputs used in an SQL command using a well-known token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-200, CWE-89
References: https://docs.chef.io/release_notes_automate/#4.13.295
CVE: CVE-2025-9648
Published: 2025-09-29
Description: A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of service (DoS) condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multiple malicious requests will result in complete CPU exhaustion and render the service unresponsive to further requests.

This issue was fixed in commit 782e189. This issue affects only the library, standalone executable pre-built by vendor is not affected.
CWE: CWE-158
References: https://cert.pl/en/posts/2025/09/CVE-2025-9648; https://github.com/civetweb/civetweb; https://github.com/civetweb/civetweb/commit/782e18903515f43bafbf2e668994e82bdfa51133
CVE: CVE-2024-13150
Published: 2025-09-29
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fayton Software and Consulting Services fayton.Pro ERP allows SQL Injection.This issue affects fayton.Pro ERP: through 20250929.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-25-0304
CVE: CVE-2025-57428
Published: 2025-09-29
Description: Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug shell exposed via Telnet on Port 23 and execute hardware-level flash and register manipulation commands.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/5ulfur/CVE-2025-57428; https://imgur.com/a/X9DNOBj
CVE: CVE-2025-36351
Published: 2025-09-29
Description: IBM License Metric Tool 9.2.0 through 9.2.40 

could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://www.ibm.com/support/pages/node/7246534
CVE: CVE-2025-36352
Published: 2025-09-29
Description: IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7246534
CVE: CVE-2025-55795
Published: 2025-09-29
Description: The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with a higher user ID without proper verification. This results in the victim's email being reassigned to the attacker's account, causing the victim to be locked out immediately and unable to log in. The vulnerability leads to denial of service via account lockout but does not grant the attacker direct access to the victim's private data.
CVSS Score: 3.5 (LOW)
CWE: CWE-284, CWE-639
References: https://github.com/openml; https://github.com/openml/openml.org; https://github.com/openml/openml.org/security/advisories/GHSA-87c5-mc8v-xf7r
CVE: CVE-2025-56449
Published: 2025-09-29
Description: A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA (e.g. after the 7-day enforcement window), the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions. In particular, the default admin account was found to be locked out via the web interface but still usable through the REST API. This allowed creation of a new privileged user, bypassing MFA protections. This undermines the intended security posture of MFA enforcement.
CVSS Score: 8.2 (HIGH)
CWE: CWE-290
References: https://blog.gregscharf.com/2025/07/11/upcoming-vulnerability-advisory/; https://blog.gregscharf.com/2025/07/31/obsidian-scheduler-access-control-vulnerability/; https://wiki.obsidianscheduler.com/docs/Release_Notes#Obsidian_6.3.1
CVE: CVE-2025-57516
Published: 2025-09-29
Description: OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file.
CVSS Score: 8.2 (HIGH)
CWE: CWE-78
References: https://github.com/sanluan/PublicCMS/issues/97
CVE: CVE-2025-11155
Published: 2025-09-29
Description: The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials.
CWE: CWE-261
References: https://www.s21sec.com/cvelist/
CVE: CVE-2025-41246
Published: 2025-09-29
Description: VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.
CVSS Score: 7.6 (HIGH)
CWE: CWE-863
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149
CVE: CVE-2024-57412
Published: 2025-09-29
Description: An issue in SunOS Omnios v5.11 allows attackers to cause a Denial of Service (DoS) via repeatedly sending crafted TCP packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/zq-star/TCP-Vuln-Report/blob/master/Omnios-r151046-5.11/tcp-rst/omnios-r151046-5.11-tcp-rst.md
CVE: CVE-2025-41244
Published: 2025-09-29
Description: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-267
References: http://support.broadcom.com/group/ecx/support-content-view/-/support-content/Security%20Advisories/VMSA-2025-0015--VMware-Aria-Operations-and-VMware-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41244-CVE-2025-41245--CVE-2025-41246-/36149; http://www.openwall.com/lists/oss-security/2025/09/29/10; https://lists.debian.org/debian-lts-announce/2025/10/msg00000.html
CVE: CVE-2025-41245
Published: 2025-09-29
Description: VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1188
References: http://support.broadcom.com/group/ecx/support-content-view/-/support-content/Security%20Advisories/VMSA-2025-0015--VMware-Aria-Operations-and-VMware-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41244-CVE-2025-41245--CVE-2025-41246-/36149
CVE: CVE-2025-51495
Published: 2025-09-29
Description: An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/cainiao159357/CVE-2025-51495; https://github.com/cesanta/mongoose; https://github.com/cesanta/mongoose/pull/3131
CVE: CVE-2025-56233
Published: 2025-09-29
Description: Openindiana, kernel SunOS 5.11 has a denial of service vulnerability. For the processing of TCP packets with RST or SYN flag set, Openindiana has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence value, just to be within the current receive window, which violates RFC5961. This flaw allows attackers to send multiple random TCP RST/SYN packets to hit the acceptable range of sequence numbers, thereby interrupting normal connections and causing a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/zq-star/TCP-Vuln-Report/blob/master/Openindiana%20minimal/tcp-rst-syn/openindiana-minimal-tcp-rst-syn.md
CVE: CVE-2025-56234
Published: 2025-09-29
Description: AT_NA2000 from Nanda Automation Technology vendor has a denial-of-service vulnerability. For the processing of TCP RST packets, PLC AT_NA2000 has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence value, just to be within the current receive window, which violates RFC5961. This flaw allows attackers to send multiple random TCP RST packets to hit the acceptable range of sequence numbers, thereby interrupting normal connections and causing a denial-of-service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/zq-star/TCP-Vuln-Report/blob/master/PLC/AT-NA2000/tcp-rst/at-na2000-tcp-rst.md
CVE: CVE-2025-56795
Published: 2025-09-29
Description: Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality. Unsanitized user input in the "note" and "text" fields of the "/api/recipes/{recipe_name}" endpoint is rendered in the frontend without proper escaping leading to persistent XSS.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/B1tBreaker/CVE-2025-56795; https://github.com/mealie-recipes/mealie/issues/5677; https://github.com/mealie-recipes/mealie/pull/5754
CVE: CVE-2025-61659
Published: 2025-09-29
Description: bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-377
References: https://github.com/magicmonty/bash-git-prompt/issues/561
CVE: CVE-2025-7104
Published: 2025-09-29
Description: A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields without proper filtering. As a result, any extra fields in the request body are included in agentData and passed to the database layer, allowing overwriting of any field in the schema, such as author, access_level, isCollaborative, and projectIds. Additionally, the Object.Prototype can be polluted due to the use of Object.assign with spread operators.
CVSS Score: 7.5 (HIGH)
CWE: CWE-915
References: https://github.com/danny-avila/librechat/commit/a37bf6719cfbc2de270f7d87b6b85d87cc1768db; https://huntr.com/bounties/32a175c4-7543-4503-a3d0-7880abd1826b
CVE: CVE-2025-41250
Published: 2025-09-29
Description: VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks.
CVSS Score: 8.5 (HIGH)
CWE: CWE-77
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150