【中文导读】该 CVE 涉及安全缺陷(高危风险)。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。
【原始描述】A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are highly complex. The exploitability is reported as difficult. Upgrading to version 144.0-1 mitigates this issue. The name of the patch is dd10e31dd873e9cb309fad8aed921d45bf905a55. It is suggested to upgrade the affected component.
【中文导读】flaw has been found in 存在安全缺陷风险(高危风险)。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。
【原始描述】A flaw has been found in 70mai X200 up to 20251010. Affected is an unknown function of the component Pairing. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
【中文导读】vulnerability has been found in 存在默认凭证风险(高危风险)。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。
【原始描述】A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.