Adobe Commerce 路径遍历漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A path traversal vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a bypass of security features and modify limited...

Adobe Substance3D Modeler 缓冲区错误漏洞

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. Adobe Substance3D Modeler suffe...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...

Adobe InDesign Desktop 缓冲区错误漏洞

Adobe InDesign Desktop is desktop publishing DTP software developed by Adobe, mainly used for typography design of print and digital publications, including books, magazines, posters, e-books and so on. Adobe InDesign Desktop suffers from an uninitialized pointer vulnerability that can be exploit...

PT-2025-32863 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.9-alpha1 through 2.4.4-p14 and earlier Description: Adobe Commerce is affected by an improper input validation issue that could lead to a denial-of-service DoS. An attacker could exploit this issue by providing...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...

Adobe InCopy 安全漏洞

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow that can be used to execute arbitrary code on the system or cause th...

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter provides real-time 3D texture painting with intelligent material system and physical rendering viewport, supporting 8K resolution material output. An out-of-bounds read vulnerability exists in Adobe Substance3D Painter, which can be exploited by attackers to cause...

Adobe Substance3D Modeler 缓冲区错误漏洞

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. An out-of-bounds write...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has a security vulnerability that can be exploited by an attacker to cause a security feature bypass...

Adobe InDesign Desktop 缓冲区错误漏洞

Adobe InDesign Desktop is a desktop publishing DTP application developed by Adobe, mainly used for typographic editing of printed materials, supporting the creation of books, magazines, posters, flyers and other printed materials. Adobe InDesign Desktop suffers from an out-of-bounds read...

PT-2025-32868 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.9-alpha1 through 2.4.4-p14 Description: Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' issue, which could bypass a security feature. An attacker could...

Adobe InDesign Desktop 资源管理错误漏洞

Adobe InDesign Desktop is desktop publishing DTP software developed by Adobe, mainly used for typography design of print and digital publications, including books, magazines, posters, e-books and so on. Adobe InDesign Desktop suffers from a post-release reuse vulnerability that can be exploited b...

Adobe Commerce 跨站脚本漏洞

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A cross-site scripting vulnerability exists in Adobe Commerce that stems from susceptibility to stored cross-site scripting attacks. The following versions are affected: version 2.4.9-alpha1, version...

Adobe InCopy < 19.5.5 / 20.0 < 20.5.0 Multiple Vulnerabilities Arbitrary code execution (APSB25-80)

The version of Adobe InCopy installed on the remote host is prior to 19.5.5, 20.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-80 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-54223 - Out-of-bounds Write CWE-78...

APSB25-71 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical and important vulnerabilities. Successful exploitation could lead to security feature bypass, privilege escalation, arbitrary file system read, and application denial-of-service...

APSB25-83 : Security update available for Adobe FrameMaker

Adobe has released a security update for Adobe FrameMaker. This update addresses critical and important vulnerabilities that could lead to arbitrary code execution and memory leak...

Adobe Framemaker 缓冲区错误漏洞

Adobe FrameMaker is Adobe's development of professional-grade technical document creation and layout software, mainly used to deal with complex long-form structured content such as technical manuals, aviation documents, etc., support for XML/DITA standards, multilingual publishing and cross-media...

VulnCheck KEV: CVE-2025-54254

Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope i...