Lucene search
+L

37733 matches found

NVD
NVD
added 2025/12/10 7:16 p.m.10 views

CVE-2025-64560

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...

5.4CVSS0.0025EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/10 7:16 p.m.9 views

CVE-2025-64566

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...

5.4CVSS0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/10 7:16 p.m.14 views

CVE-2025-64545

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...

5.4CVSS0.00203EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/10 6:30 p.m.12 views

EUVD-2025-202433

A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attackers to execute a directory traversal...

6.5CVSS6.5AI score0.00575EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/12/10 6:30 p.m.10 views

EUVD-2025-202454

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from...

6.4AI score0.00394EPSS
SaveExploits0References5
CVE
CVE
added 2025/12/10 6:24 p.m.28 views

CVE-2025-64545

Adobe Experience Manager (AEM) 6.5.23 and earlier is affected by a DOM-based XSS vulnerability (CVE-2025-64545) that could allow a low-privileged attacker to execute scripts in a victim’s browser with user interaction. The root cause is DOM-based XSS in the web context; impact is XSS potentially ...

5.4CVSS5.3AI score0.00203EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/10 6:24 p.m.4 views

CVE-2025-64537 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by injecting malicious scripts into a web page that are executed in the context of the...

9.3CVSS6.1AI score0.0074EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/10 6:24 p.m.3 views

CVE-2025-64563 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...

5.4CVSS5.3AI score0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/10 6:24 p.m.3 views

CVE-2025-64888 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...

5.4CVSS5.3AI score0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/10 6:23 p.m.5 views

CVE-2025-64560 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...

5.4CVSS5.3AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/10 6:23 p.m.38 views

CVE-2025-64566 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...

5.4CVSS0.00273EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/10 6:22 p.m.4 views

CVE-2025-64562 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction,...

5.4CVSS5.2AI score0.0025EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/10 6:14 p.m.176 views

Exploit for CVE-2025-57459

CVE-2025-57459 Des: Stored XS...

6.2AI score
SaveExploits1
NVD
NVD
added 2025/12/10 5:15 p.m.10 views

CVE-2025-65815

A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attackers to execute a directory traversal...

6.5CVSS0.00575EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/10 5:15 p.m.17 views

CVE-2025-65815

A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attackers to execute a directory traversal...

6.5CVSS5.9AI score0.00575EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/10 4:16 p.m.17 views

CVE-2025-65803

An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service DoS via supplying a crafted PSD file...

6.5CVSS5.9AI score
SaveExploits0References2
Wired Threat Level
Wired Threat Level
added 2025/12/10 3:26 p.m.12 views

A Complete Guide to the Jeffrey Epstein Document Dumps

New records about the infamous sex offender are released seemingly every week. Here’s a quick rundown of who’s releasing the Epstein documents, what they contain—and what they’re releasing next...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.7 views

CVE-2025-49341

Cross-Site Request Forgery CSRF vulnerability in Alex Furr PDF Creator Lite pdf-creator-lite allows Stored XSS.This issue affects PDF Creator Lite: from n/a through = 1.2...

7.1CVSS6.6AI score0.00147EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.10 views

CVE-2025-63048

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows DOM-Based XSS.This issue affects ListingPro Lead Form: from n/a through = 1.0.7...

6.5CVSS5.8AI score0.00234EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.8 views

CVE-2025-63037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DFDevelopment Ronneby Theme Core ronneby-core allows DOM-Based XSS.This issue affects Ronneby Theme Core: from n/a through = 1.5.68...

6.5CVSS6.4AI score0.00196EPSS
SaveExploits0References1
Rows per page
Query Builder