Lucene search
+L

1898 matches found

Cvelist
Cvelist
added 2025/10/14 7:28 p.m.23 views

CVE-2025-54283 Illustrator | Out-of-bounds Write (CWE-787)

Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00198EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.9 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current user...

7.8CVSS7.2AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.11 views

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current user...

7.8CVSS7.2AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.8 views

Adobe Dimension 输入验证错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An input validation error vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

7.8CVSS7.6AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.10 views

Adobe Dimension 资源管理错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. A memory misreference vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

7.8CVSS7.6AI score0.00215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/10/07 12:0 a.m.10 views

MindManager Attachment Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindManager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS7.2AI score
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-28016

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00514EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-24468

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.00193EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-24488

Malicious code in bioql PyPI...

7.8CVSS6.3AI score0.00318EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-24526

Malicious code in bioql PyPI...

7.8CVSS6.3AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.21 views

EUVD-2025-24493

Malicious code in bioql PyPI...

7.8CVSS6.3AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/25 4:31 p.m.30 views

CVE-2025-10879

CVE-2025-10879 affects all versions of the Dingtian DT-R002. The vulnerability is described as Insufficiently Protected Credentials that could allow an unauthenticated attacker to retrieve the current user’s username (and, per ICS docs, potentially extract the proprietary protocol password by an ...

8.7CVSS6.5AI score0.00282EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/09/11 7:24 a.m.42 views

CVE-2025-8570

The BeyondCart Connector plugin for WordPress (versions 1.4.2 through 2.1.0) is affected by Privilege Escalation due to improper JWT secret management and authorization in the determine_current_user filter. This allows unauthenticated attackers to craft valid JWTs and impersonate any user (includ...

9.8CVSS5.9AI score0.00639EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/09/11 7:24 a.m.10 views

CVE-2025-8570 BeyondCart Connector <= 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determinecurrentuser filter in versions 1.4.2 through 2.1.0. This makes it possible for unauthenticated attackers to craft valid tokens and assume...

9.8CVSS6AI score0.00639EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/09/11 12:0 a.m.22 views

PT-2025-37134

Name of the Vulnerable Software and Affected Versions: BeyondCart Connector plugin for WordPress versions 1.4.2 through 2.1.0 Description: The BeyondCart Connector plugin for WordPress is susceptible to privilege escalation due to improper JWT JSON Web Token secret management and authorization...

9.8CVSS6.6AI score0.00639EPSS
SaveExploits1References4
CNVD
CNVD
added 2025/09/11 12:0 a.m.4 views

Adobe Substance3D Viewer Heap Buffer Overflow Vulnerability

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS8AI score0.0026EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/09/11 12:0 a.m.6 views

Adobe Premiere Pro Memory Misreference Vulnerability

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe Premiere Pro, which can be exploited by an attacker to cause arbitrary code to be executed in the current user environment...

7.8CVSS7.2AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/09 8:15 p.m.9 views

CVE-2025-54257

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

7.8CVSS0.00343EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.9 views

Adobe Substance3D Modeler 资源管理错误漏洞

Adobe Substance3D Modeler is a 3D modeling software from the American company Audobee Adobe. A code execution vulnerability exists in Adobe Substance3D Modeler, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.0022EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.8 views

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

7.8CVSS7.8AI score0.00207EPSS
SaveExploits0References1
Rows per page
Query Builder