NA - CVE-2025-2403 - A denial-of-service vulnerability due to...
A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploited could...
NA - CVE-2025-39201 - A vulnerability exists in MicroSCADA X SYS600...
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service.
NA - CVE-2025-39202 - A vulnerability exists in in the Monitor Pro...
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information leak and data...
NA - CVE-2025-39203 - A vulnerability exists in the IEC 61850 of the...
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection...
NA - CVE-2025-39204 - A vulnerability exists in the Web interface of...
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the...
NA - CVE-2025-39205 - A vulnerability exists in the IEC 61850 in...
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation.
NA - CVE-2025-6424 - A use-after-free in FontFaceSet resulted in a...
A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox < 140, Firefox ESR < 115.25, and Firefox ESR < 128.12.
NA - CVE-2025-6425 - An attacker who enumerated resources from the...
An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing...
NA - CVE-2025-6426 - The executable file warning did not warn users...
The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.* This...
NA - CVE-2025-6427 - An attacker was able to bypass the...
An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools....