PT-2025-36776

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.23.0 and earlier Description: Adobe Experience Manager versions 6.5.23.0 and earlier are susceptible to an Improper Input Validation issue that may lead to a Security feature bypass. A low-privileged...

PT-2025-36775

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.23.0 and earlier Description: Adobe Experience Manager is susceptible to an Incorrect Authorization issue that may lead to a Security feature bypass. A low-privileged attacker could exploit this issue to...

Adobe Substance3D Modeler 缓冲区错误漏洞

Adobe Substance3D Modeler is a 3D modeling software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance3D Modeler, which can be exploited by an attacker to execute code on a system or cause the application to crash...

Adobe After Effects < 24.6.8 / 25.0 < 25.4 Multiple Memory exposure (APSB25-86)

The version of Adobe After Effects installed on the remote Windows host is prior to 24.6.8, 25.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-86 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory exposure CVE-2025-54239, CVE-2025-54240,...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in Adobe Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier versions, which stems from th...

Adobe Acrobat Reader 安全漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A security vulnerability exists in Adobe Acrobat Reader version 24.001.30254, version 20.005.30774, version 25.001.20672 and prior versions, which stems from a...

APSB25-90 : Security update available for Adobe Experience Manager

Adobe has released updates for Adobe Experience Manager AEM. These updates resolve vulnerabilities rated critical and important. Successful exploitation of these vulnerabilities could result in security feature bypass...

APSB25-86 : Security update available for Adobe After Effects

Adobe has released an update for Adobe After Effects for Windows and macOS. This update addresses important security vulnerabilities. Successful exploitation could lead to memory exposure...

APSB25-87 : Security update available for Adobe Premiere Pro

Adobe has released updates for Adobe Premiere Pro for Windows and macOS. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution...

Adobe Experience Manager 安全漏洞

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. A misauthorization vulnerability exists in Adobe Experience...

Adobe Experience Manager 安全漏洞

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. An XML entity injection vulnerability exists in Adobe Experienc...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce that can be exploited by an attacker to bypass security restrictions...

Adobe After Effects < 24.6.8 / 25.0 < 25.4 Multiple Memory exposure (APSB25-86) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 24.6.8, 25.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-86 advisory. - Out-of-bounds Read CWE-125 potentially leading to Memory exposure CVE-2025-54239, CVE-2025-54240,...

APSB25-88 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability. Successful exploitation could lead to security feature bypass...

APSB25-92: Security update available for Adobe 3D Substance Modeler

Adobe has released an update for Adobe Substance 3D Modeler. This update addresses critical vulnerabilities in Adobe Substance 3D Modeler. Successful exploitation could lead to arbitrary code execution...

Adobe Dreamweaver 21.0 < 21.6 Arbitrary code execution (APSB25-91)

The version of Adobe Dreamweaver installed on the remote Windows host is prior to 21.6. It is, therefore, affected by a vulnerability as referenced in the APSB25-91 advisory. - Cross-Site Request Forgery CSRF CWE-352 potentially leading to Arbitrary code execution CVE-2025-54256 Note that Nessus...

Adobe Commerce/Magento Open Source Multiple Vulnerabilities (APSB25-71)

The version of Adobe Commerce/Magento Open Source installed on the remote host it is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-71 advisory. - Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an...

APSB25-91 : Security update available for Adobe Dreamweaver

Adobe has released a security update for Adobe Dreamweaver. This update resolves a critical vulnerability that could lead to arbitrary code execution...

PT-2025-36491

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions prior to 2.4.10 Magento Open Source affected versions not specified Description An improper input validation issue, known as SessionReaper, exists in the REST API, specifically within the ServiceInputProcessor and the...

Linux Distros Unpatched Vulnerability : CVE-2016-4216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in...