71186 matches found
APSB25-78 : Security update available for Adobe Substance 3D Sampler
Adobe has released an update for Adobe Substance 3D Sampler. This update addresses an important vulnerability in Adobe Substance 3D Sampler. Successful exploitation could lead to memory leak...
Adobe InDesign Desktop 安全漏洞
Adobe InDesign Desktop is a desktop publishing DTP application developed by Adobe, mainly used for typographic editing of printed materials, supporting the creation of books, magazines, posters, flyers and other printed materials. A buffer overflow vulnerability exists in Adobe InDesign Desktop,...
Adobe Commerce 跨站请求伪造漏洞
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A cross-site request forgery vulnerability exists in Adobe Commerce, which stems from susceptibility to cross-site request forgery attacks that could result in elevation of privilege. The following...
APSB25-73 : Security update available for Adobe Animate
Adobe has released an update for Adobe Animate. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and memory leak...
APSB25-84 : Security update available for Adobe Dimension
Adobe has released an update for Adobe Dimension that addresses an important vulnerability that could lead to memory leak...
Adobe Photoshop 25.x < 25.12.4 / 26.x < 26.9 Vulnerability (APSB25-75)
The version of Adobe Photoshop installed on the remote Windows host is prior to 25.12.4/26.9. It is, therefore, affected by a vulnerability as referenced in the apsb25-75 advisory. - Out-of-bounds Write CWE-787 potentially leading to Arbitrary code execution CVE-2025-49570 Note that Nessus has no...
Adobe Illustrator < 28.7.9 / 29.0.0 < 29.7.0 Multiple Vulnerabilities (APSB25-74) (macOS)
The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.9, 29.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-74 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2025-49564 -...
Adobe InDesign < 19.5.5 / 20.0 < 20.5.0 Multiple Vulnerabilities (APSB25-79) (macOS)
The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.5, 20.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-79 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-54224, CVE-2025-54225,...
Adobe FrameMaker 2020 < 16.0.9 (2020.0.9) / Adobe FrameMaker 2022 < 17.0.7 (2022.0.7) Multiple Vulnerabilities (APSB25-83)
The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.9 / Adobe FrameMaker 2022 17.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-83 advisory. - Use After Free CWE-416 potentially leading to Arbitrary...
Adobe Photoshop 25.x < 25.12.4 / 26.x < 26.9 Vulnerability (macOS APSB25-75)
The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 25.12.4/26.9. It is, therefore, affected by a vulnerability as referenced in the apsb25-75 advisory. - Out-of-bounds Write CWE-787 potentially leading to Arbitrary code execution CVE-2025-49570 Note that...
Adobe Experience Manager XML Entity Injection Vulnerability (CNVD-2025-21172)
Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. Adobe Experience Manager suffers from an XML entity injection...
Adobe Experience Manager cross-site scripting vulnerability (CNVD-2025-18562)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
Adobe Experience Manager Code Execution Vulnerability
Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. A code execution vulnerability exists in Adobe Experience Manag...
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager (AEM) Forms on JEE lies in the incorrect restrictions on XML links to external objects. This allows attackers to read arbitrary files.
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could...
CVE-2025-54253
Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user...
CVE-2025-54254
Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope i...
CVE-2025-46958
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
