CVE-2025-5289

The WordPress plugin 3D FlipBook (Lite Edition) – including PDF Embedder, PDF Flipbook Viewer, and Flipbook Image Gallery, version

CVE-2025-5289 3D FlipBook - Lite Edition <= 1.16.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode Parameters

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ and 'mode' parameters in all versions up to, and including, 1.16.15 due to insufficient input sanitization and output escaping. This makes ...

PT-2025-26500 · WordPress · 3D Flipbook – Pdf Embedder

Name of the Vulnerable Software and Affected Versions: The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress versions up to, and including, 1.16.15 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization an...

Adobe Substance3D Sampler Out-of-Bounds Write Vulnerability (CNVD-2025-13322)

Adobe Substance 3D Sampler is a professional software from Adobe designed to help users easily create and iterate on realistic material maps. Adobe Substance3D Sampler suffers from an out-of-bounds write vulnerability that can be exploited by attackers to execute code on the system or cause the...

Adobe Substance3D Painter Buffer Overflow Vulnerability

Adobe Substance 3D Painter is a professional 3D texture design tool under the Adobe Creative Cloud ecosystem. Adobe Substance3D Painter suffers from a buffer overflow vulnerability that originates from out-of-bounds writes, which can be exploited by attackers to cause arbitrary code execution...

Adobe Substance 3D Painter < 11.0.2 (APSB25-58)

The version of Adobe Substance 3D Painter installed on the remote host is prior to 11.0.2. It is, therefore, affected by a vulnerability as referenced in the APSB25-58 advisory. - Substance3D - Painter versions 11.0.1 and earlier are affected by an out-of-bounds write vulnerability that could...

Adobe Substance 3D Sampler <= 5.0.0 Multiple Vulnerabilities (APSB25-55)

The version of Adobe Substance 3D Sampler installed on the remote host is prior to 5.0.0 It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-55 advisory. - Substance3D - Sampler versions 5.0 and earlier are affected by an out-of-bounds write vulnerability that could...

[SECURITY] Fedora 42 Update: qt6-qtgraphs-6.9.1-1.fc42

The Qt Graphs module enables you to visualize data in 3D as bar, scatter, and surface graphs. It's especially useful for visualizing depth maps and large quantities of rapidly changing data, such as data received from multiple sensors. The look and feel of graphs can be customized by using themes...

[SECURITY] Fedora 42 Update: qt6-qt3d-6.9.1-1.fc42

Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications...

[SECURITY] Fedora 42 Update: qt6-qtdatavis3d-6.9.1-1.fc42

Qt Data Visualization module provides multiple graph types to visualize data in 3D space both with C++ and Qt Quick 2...

CVE-2025-48067

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILEUPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the...

APSB25-55 : Security update available for Adobe Substance 3D Sampler

Adobe has released an update for Adobe Substance 3D Sampler. This update addresses critical vulnerabilities in Adobe Substance 3D Sampler. Successful exploitation could lead to arbitrary code execution...

APSB25-58 : Security update available for Adobe Substance 3D Painter

Adobe has released an update for Adobe Substance 3D Painter. This update addresses a critical vulnerability in Adobe Substance 3D Painter. Successful exploitation could lead to arbitrary code execution...

CVE-2025-4991

A stored Cross-site Scripting XSS vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-4991

A stored Cross-site Scripting XSS vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-4991

CVE-2025-4991 : A stored XSS in Collaborative Industry Innovator’s 3D Markup affects 3DEXPERIENCE R2022x through R2025x. Attacker can execute arbitrary script in a user’s browser. A fix is not disclosed in the provided documents; one source suggests disabling 3D Markup until patch availability. N...

CVE-2025-4991 Stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

A stored Cross-site Scripting XSS vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...

PT-2025-23304 · Unknown +1 · Collaborative Industry Innovator +1

Name of the Vulnerable Software and Affected Versions: Collaborative Industry Innovator versions R2022x through R2025x Description: A stored Cross-site Scripting XSS vulnerability in 3D Markup allows an attacker to execute arbitrary script code in a user's browser session. This issue affects the...

Microsoft 3D Viewer Multiple Vulnerabilities (May 2025) - Windows

Microsoft 3D Viewer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:3dviewer";...

Microsoft 3D Viewer < 7.2306.12012.0 Multiple Vulnerabilities (May 2025) - Windows

Microsoft 3D Viewer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:3dviewer";...