Adobe Connect 跨站脚本漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit the vulnerability to steal the victim's...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which could be exploited by an attacker to bypass security measures and gain unauthorized...

PT-2025-42201

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to elevated privileg...

PT-2025-42202

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read access. Exploitation of this...

Adobe Connect <= 12.9 Multiple Vulnerabilities (APSB25-70)

The version of Adobe Connect installed on the remote host is prior to 12.10. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-70 advisory. - Cross-site Scripting DOM-based XSS CWE-79 potentially leading to Arbitrary code execution CVE-2025-49552, CVE-2025-49553 -...

Adobe Illustrator < 28.7.10 / 29.0 < 29.8 Multiple Arbitrary code execution (APSB25-102) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.10, 29.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-102 advisory. - Illustrator versions 29.7, 28.7.9 and earlier are affected by an out-of-bounds write vulnerability that...

APSB25-101 : Security update available for Adobe FrameMaker

Adobe has released a security update for Adobe FrameMaker. This update addresses critical vulnerabilities that could lead to arbitrary code execution...

APSB25-96 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses a critical and important vulnerabilities that could lead to arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

APSB25-97 : Security update available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and memory exposure...

PT-2025-42200

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...

PT-2025-42198

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4 through 2.4.9-alpha2 Description A stored Cross-Site Scripting XSS issue exists in Adobe Commerce that could allow a high-privileged attacker to inject malicious scripts into vulnerable form fields. Successful...

Adobe Dimension 资源管理错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. A memory misreference vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

Adobe Commerce 跨站脚本漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from a cross-site scripting vulnerability that can be exploited by an attacker to steal a victim's cookie-based authentication...

PT-2025-42204

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description The software is susceptible to a DOM-based Cross-Site Scripting XSS issue. Successful exploitation could allow an attacker to execute malicious scripts in a victim’s browser, potentially...

Adobe Dimension 输入验证错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An input validation error vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

Adobe Connect 输入验证错误漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect has an open redirection vulnerability that can be exploited by an attacker to cause users to be redirected to a malicious website...

Adobe Substance3D Stager 资源管理错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. A resource management error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from reuse after release and could lead to the execution of arbitrary code in the curre...

PT-2025-42207

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...

Adobe Animate 23.x < 23.0.15 / 24.x < 24.0.12 Multiple Vulnerabilities (APSB25-97)

The version of Adobe Animate installed on the remote Windows host is prior to 23.0.15 or 24.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-97 advisory. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2025-61804 - U...

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a standalone desktop application for viewing and editing 3D files from Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Viewer 0.25.2 and earlier versions, which stems from an out-of-bounds write vulnerability that could lead to a denial of service o...