CVE-2025-40583: Cleartext Transmission of Sensitive Information

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information...

PT-2025-20877

Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions with SINEMA Remote Connect Edge Client installed Description A vulnerability has been identified in SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize...

CVE-2025-30316: Improper Neutralization of Input During Web Page Generation

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the pag...

CVE-2025-30315: Improper Neutralization of Input During Web Page Generation

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t...

CVE-2025-30174: Out-of-bounds Read

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

PT-2025-20876

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 versions with SINEMA Remote Connect Edge Client installed Description: A vulnerability has been identified that allows a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and...

CVE-2025-30176: Out-of-bounds Read

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

Adobe Connect Cross-Site Script Vulnerability

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...

Adobe Connect <= 12.8 Multiple Vulnerabilities (APSB25-36)

The version of Adobe Connect installed on the remote host is prior to 12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-36 advisory. - Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability that could be...

CVE-2025-40581: Authentication Bypass Using an Alternate Path or Channel

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices are vulnerable to an authentication bypass. This could allow a non-privileged local attacker to bypass the authentication of the SINE...

ALSA-2025:7419 Important: mod_auth_openidc security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc allows OIDCProviderAuthRequestMethod POSTs to leak...

PT-2025-20878

Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions with SINEMA Remote Connect Edge Client installed Description A vulnerability has been identified in SCALANCE LPE9403, where affected devices transmit sensitive information in cleartext. This could allow a privileged...

Adobe Connect Cross-Site Script Vulnerability

Adobe Connect is a versatile online meeting and collaboration tool from Adobe for digital training, webinars and team collaboration. A cross-site scripting vulnerability exists in Adobe Connect. The vulnerability is due to Adobe Connect failing to effectively escape and filter user-supplied input...

PT-2025-21041 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 12.8 and earlier Description: A stored Cross-Site Scripting XSS vulnerability affects Adobe Connect, allowing an attacker to inject malicious scripts into vulnerable form fields. When a victim accesses the page containi...

PT-2025-21046 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 12.8 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to inject malicious scripts into vulnerable form fields. When a victim accesses the pa...

Siemens Mendix OIDC SSO security vulnerability

Siemens Mendix OIDC SSO is an enterprise-class unified identity solution based on the OIDC protocol from Siemens Germany. A security vulnerability exists in Siemens Mendix OIDC SSO that stems from improper assignment of token access privileges, which could lead to privilege abuse...

Adobe Connect Cross-Site Script Vulnerability

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute malicious JavaScript...

CVE-2025-30314: Improper Neutralization of Input During Web Page Generation

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t...

CVE-2025-40582: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V2.1 HF0 with SINEMA Remote Connect Edge Client installed. Affected devices do not properly sanitize configuration parameters. This could allow a non-privileged local attacker to execute root commands on the...

APSB25-36 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and privilege escalation...