CVE-2025-54212

Adobe InDesign Desktop CVE-2025-54212 is a heap-based buffer overflow affecting InDesign Desktop up to version 20.4 and 19.5.4 and earlier, enabling arbitrary code execution in the current user context when a user opens a crafted file. Exploitation requires user interaction. Adobe/APSB25-79 notes...

CVE-2025-54206

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54206 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54206 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2025-32928 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are affected by a Heap-based Buffer Overflow that may lead to arbitrary code execution within the current user's context...

PT-2025-32941 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop versions 19.5.4 and earlier Description: InDesign Desktop is affected by a Use After Free issue that may lead to arbitrary code execution with current user privileges. Successful...

PT-2025-32935 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and 19.5.4 and earlier Description: InCopy is susceptible to an out-of-bounds write issue, potentially leading to arbitrary code execution with current user privileges. User interaction is required for exploitation,...

PT-2025-32930 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 and earlier are affected by an out-of-bounds write issue that may lead to...

PT-2025-32932 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and 19.5.4 and earlier Description: InCopy versions 20.4, 19.5.4, and earlier are susceptible to an out-of-bounds write issue, potentially leading to arbitrary code execution with current user privileges. Successful...

PT-2025-32933 · Adobe · Incopy 19.5.4 +1

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 and earlier Description: InCopy versions 20.4 and earlier, including version 19.5.4, are susceptible to an out-of-bounds write issue. Successful exploitation could lead to arbitrary code...

PT-2025-32939 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and 19.5.4 and earlier Description: InCopy versions 20.4, 19.5.4, and earlier are susceptible to a Use After Free issue, potentially leading to arbitrary code execution with the privileges of the current user. Successful...

PT-2025-32943 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, including version 19.5.4, are affected by an out-of-bounds read issue that may lead to sensitive...

CVE-2023-28775

Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4...

WordPress plugin Yoast SEO Premium security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-30401 Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman

An Out-of-bounds Read vulnerability in the advanced forwarding management process aftman of Juniper Networks Junos OS on MX Series with MPC10E, MPC11, MX10K-LC9600 line cards, MX304, and EX9200-15C, may allow an attacker to exploit a stack-based buffer overflow, leading to a reboot of the FPC...

CVE-2024-30388 Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps

An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on QFX5000 Series and EX Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. If a specific malformed LACP packet is received by a QFX5000...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : HDF5 vulnerabilities (USN-5272-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5272-1 advisory. It was discovered that HDF5 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of...

CVE-2023-36835 Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on QFX10000 Series allows a network based attacker to cause a Denial of Service DoS. If a specific valid IP packet is received and that packet needs to be routed...

CVE-2023-28980 Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued

A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service DoS. In a rib sharding scenario the rpd process will crash shortly after specific CLI command is...

CVE-2023-22414 Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and leading to FPC crash. On all Junos PTX...