23594 matches found
CVE-2025-46919
CVE-2025-46919 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue is stored Cross-Site Scripting (XSS) in vulnerable form fields, allowing a low-privilege attacker to inject JavaScript that executes in a victim’s browser when visiting the vulnerable page. The cited advi...
CVE-2025-47062
CVE-2025-47062 affects Adobe Experience Manager 6.5.22 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when the page is visited (requires user interaction). Remediation is to update to a fixe...
CVE-2025-46889 Adobe Experience Manager | Improper Access Control (CWE-284)
Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized elevated access...
CVE-2025-46877 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
CVE-2025-35006
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...
CVE-2024-41502
creationtimestamp| type| source ---|---|--- 2025-06-10 21:13:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbsotnsb72r...
CVE-2024-41505
creationtimestamp| type| source ---|---|--- 2025-06-10 21:03:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbs64suqx2e...
CVE-2025-36852
creationtimestamp| type| source ---|---|--- 2025-06-10 20:31:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17988 2025-07-08 15:42:22+00:00| seen| https://bsky.app/profile/nx.dev/post/3lthnb7snf72q 2025-07-15 15:19:42+00:00| seen|...
CVE-2025-49133
Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds OOB read vulnerability. The...
CVE-2025-43576
creationtimestamp| type| source ---|---|--- 2025-06-10 19:31:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17980 2025-06-10 21:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbsxshnuo2m 2025-06-11 14:00:11+00:00| seen|...
CVE-2025-43577
creationtimestamp| type| source ---|---|--- 2025-06-10 19:31:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17974 2025-06-10 21:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbtsoddsl2u...
CVE-2025-43576 Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2025-43576
CVE-2025-43576 affects Adobe Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier with a Use After Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affected p...
CVE-2025-5972 PHPGurukul Restaurant Table Booking System manage-subadmins.php cross site scripting
A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/manage-subadmins.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotel...
CVE-2025-2474
CVE-2025-2474 describes an out-of-bounds write in the PCX image codec used by QNX SDP 7.0, 7.1, and 8.0. The vulnerability could allow an unauthenticated attacker to cause a denial-of-service or execute code in the context of the process using the image codec. Connected sources corroborate the af...
CVE-2025-0051
CVE-2025-0051 describes an issue in Pure Storage FlashArray where improper input validation during authentication can cause a Denial of Service. The connected documents identify the affected product (FlashArray) and the root cause (input validation during authentication) with the impact being DoS...
CVE-2025-47957
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-47953
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...