CVE-2025-21137

Affected product : Substance3D Designer. Vulnerable versions : 14.0 and earlier. Issue type / root cause : Heap-based buffer overflow in Substance3D Designer can lead to arbitrary code execution in the context of the current user. Attack vector / prerequisites : Exploitation requires user interac...

PT-2024-10224 · Unknown · Web Designer

The Web Designer configuration tool is affected by an Improper Restriction of XML External Entity Reference issue, which could lead to information disclosure, impact workstation integrity, and potentially allow remote code execution on the compromised computer. This occurs when a specifically...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data beyond the buffer in memory, allows attackers to bypass the ASLR protection and gain unauthorized access to protected information.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection and gain unauthorized access to protected information using a speciall...

Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Designer

Overview CX-Designer provided by OMRON Corporation contains an improper restriction of XML external entity reference XXE vulnerability CWE-611. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact If a user opens a specially crafted project fil...

The vulnerability of the 3D model texturing program Adobe Substance Designer, which allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance Designer is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code during the analysis of SBS files...

DEBIAN-CVE-2016-5733

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...

JBPM jbpm-designer XML External Entity Vulnerability

JBPM full name Java Business Process Management, Business Process Management is a set of open source executable process language framework. jbpm-designer is one of the Web-based jBPM process design tool . JBPM jbpm-designer version 6.0.x and 6.2.x version of the...