Lucene search
+L

19875 matches found

RedhatCVE
RedhatCVE
added 2025/07/10 10:14 p.m.9 views

CVE-2025-47132

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.0017EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 10:14 p.m.7 views

CVE-2025-47131

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 10:14 p.m.9 views

CVE-2025-47130

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

7.8CVSS7.7AI score0.00187EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 10:14 p.m.8 views

CVE-2025-47136

InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 10:13 p.m.4 views

CVE-2025-49531

Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 10:13 p.m.8 views

CVE-2025-49527

Illustrator versions 28.7.6, 29.5.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00242EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 10:13 p.m.5 views

CVE-2025-49528

Illustrator versions 28.7.6, 29.5.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00242EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 9:23 p.m.17 views

CVE-2025-43582

Substance3D - Viewer versions 0.22 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user, scope unchanged. Exploitation of this issue requires user interaction in that a victim must open a malicious...

7.8CVSS7.8AI score0.00221EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 6:24 p.m.11 views

CVE-2025-30312

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.0017EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 5:18 p.m.9 views

CVE-2025-43580

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this...

5.5CVSS6.8AI score0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 5:18 p.m.11 views

CVE-2025-21165

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00195EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/10 5:18 p.m.11 views

CVE-2025-21164

Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 3:15 p.m.9 views

CVE-2024-39752

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing...

9.8CVSS5.8AI score0.00278EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/10 12:00 a.m.11 views

Autodesk Revit 安全漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that originates from parsing a malicious RFA file that could lead to memory corruption...

7.8CVSS6.4AI score0.00349EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/10 12:00 a.m.9 views

Autodesk Revit 安全漏洞

Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that stems from parsing a malicious RTE file could lead to a heap overflow...

7.8CVSS6.3AI score0.00168EPSS
SaveExploits0References4
NVD
NVD
added 2025/07/09 9:15 p.m.17 views

CVE-2025-6377

A remote code execution security issue exists in the Rockwell Automation Arena®. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object. Exploitation requires user interaction, such as opening a malicious file within the software. If exploited, a threa...

7.8CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/09 8:13 p.m.57 views

CVE-2025-6376

Rockwell Automation Arena contains an out-of-bounds/write vulnerability that can lead to remote code execution when a crafted DOE file is opened. Exploitation requires user interaction, and code runs with administrator privileges to maximize impact. Publicly documented in multiple sources; a reme...

7.8CVSS7.3AI score0.00205EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/07/09 8:12 p.m.50 views

CVE-2025-6377

Rockwell Automation Arena® has an input handling vulnerability where crafted DOE files can cause out-of-bounds writes, enabling remote code execution. Exploitation requires user interaction (opening a malicious file) and could execute arbitrary code in the administrator context, per the CVSS/ADRs...

7.8CVSS7.3AI score0.00205EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:00 a.m.20 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 involve reading beyond the buffer in memory. This allows attackers to bypass the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow...

5.5CVSS5.6AI score0.00375EPSS
SaveExploits0References2
NVD
NVD
added 2025/07/08 11:15 p.m.13 views

CVE-2025-47133

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.0017EPSS
SaveExploits0References1
Rows per page
Query Builder