2025

Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory corruption and we presu

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full

Starting in Thunderbird 143, the use of the native messaging API by web extensions on Windows could lead to crashes caus

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool th

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a passwo

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnera

Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these b

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird

Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code

A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encou

There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnera

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipula

Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Th

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager (SDM) of

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting Inf

A security issue exists within the Studio 5000 Logix Designer add-on profile (AOP) for the ArmorStart Classic distribute

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versi

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versi

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versi

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versi

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnera

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 154

A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf

In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escal

In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information

In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (

In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proxim

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (

Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affect

A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.2), SI

A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SI

ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can

A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote a

An low privileged remote attacker with an account for the Web-based management can change the system configuration to pe

In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a r