Lucene search
+L

305 matches found

vulnersOsv
vulnersOsv
added 2025/09/08 9:31 a.m.12 views

biz.netcentric.aem.sysenvtools:apply-system-env-install-hook (>=1.2.0 <=1.2.3), biz.netcentric.aem.sysenvtools:system-env-change-listener (>=1.2.0 <=1.2.3) +410 more potentially affected by CVE-2025-58782 via org.apache.jackrabbit:jackrabbit-jcr-commons (>=2.0-beta1 <=2.22.1)

org.apache.jackrabbit:jackrabbit-jcr-commons MAVEN version =2.0-beta1, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.8.0, =2.0.0, =2.5.0, =2.5.4, =2.5.4, =4.2.0, =1.0.0, =1.0.0, =1.0.0, =1.4.0 - biz.ne...

6.5CVSS5.8AI score0.01286EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/08/06 7:28 p.m.163 views

Exploit for CVE-2025-54253

!Explo...

10CVSS9AI score0.87515EPSS
SaveExploits7
Adobe
Adobe
added 2025/08/05 12:0 a.m.30 views

APSB25-82 : Security update available for Adobe Experience Manager Forms

Adobe has released a security update for Adobe Experience Manager Forms on Java Enterprise Edition JEE. This update addresses critical vulnerabilities that could lead to arbitrary code execution and arbitrary file system read...

6.2AI score
SaveExploits0Affected Software1
Adobe
Adobe
added 2025/07/08 12:0 a.m.11 views

APSB25-68 : Security update available for Adobe Experience Manager Screens

Adobe has released security updates for AEM Screens. This vulnerability resolves important vulnerabilities that could lead to arbitrary code execution...

6AI score
SaveExploits0Affected Software1
Adobe
Adobe
added 2025/07/08 12:0 a.m.17 views

APSB25-67 : Security update available for Adobe Experience Manager Forms

Adobe has released a security update for Adobe Experience Manager Forms on JEE. This update addresses a critical vulnerability that could lead to arbitrary code execution...

9.8CVSS8.1AI score0.46529EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/06/10 11:15 p.m.4 views

CVE-2025-46974

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.7AI score0.0029EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/06/10 11:15 p.m.2 views

CVE-2025-46840

Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue...

8.7CVSS5.7AI score0.00366EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.5 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.6AI score0.0029EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.6 views

Adobe Experience Manager(AEM) 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.8AI score0.00295EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/06/04 7:15 a.m.7 views

CVE-2025-5434

A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

7.5CVSS7.2AI score0.00305EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/02 7:15 a.m.14 views

CVE-2025-5434

A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

7.5CVSS0.00305EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/06/02 7:0 a.m.7 views

CVE-2025-5434 Aem Solutions CMS page.php sql injection

A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

7.5CVSS7.2AI score0.00305EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/06/02 7:0 a.m.19 views

CVE-2025-5434 Aem Solutions CMS page.php sql injection

A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

7.5CVSS0.00305EPSS
SaveExploits0References4
CVE
CVE
added 2025/06/02 7:0 a.m.54 views

CVE-2025-5434

CVE-2025-5434 refers to a SQL injection in Aem Solutions CMS (versions up to 1.0) arising from unsafely handling the ID parameter in /page.php. Multiple sources (NVD, Red Hat, CVE/CVEList, PT-Security, CNNVD) describe remote exploitation and disclosure of the exploit; affected component is the /p...

7.5CVSS7.4AI score0.00305EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/06/02 12:0 a.m.6 views

PT-2025-23475 · Unknown · Aem Solutions Cms

Name of the Vulnerable Software and Affected Versions: Aem Solutions CMS versions up to 1.0 Description: A critical issue affects an unknown part of the file /page.php. The manipulation of the ID argument leads to sql injection. It is possible to initiate the attack remotely. The vendor was...

7.5CVSS7.4AI score0.00305EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2025/06/02 12:0 a.m.6 views

Aem Solutions CMS 注入漏洞

Aem Solutions CMS is a software for content management from Aem Solutions, USA. An injection vulnerability exists in Aem Solutions CMS version 1.0 and prior versions, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /page.php...

7.5CVSS7.8AI score0.00305EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 9:30 p.m.16 views

CVE-2021-21084

AEM's Cloud Service offering, as well as versions 6.5.7.0 and below, 6.4.8.3 and below and 6.3.3.8 and below are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be...

7.3CVSS5.4AI score0.01816EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/11 7:45 p.m.6 views

Malicious code in client-aem-content-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 779c71c2fb1a6dd0a5ca58ddaa83c69bb166c94bb2d859ec8255efe06565c4a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2025/05/11 7:45 p.m.3 views

MAL-2025-3724 Malicious code in client-aem-content-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 779c71c2fb1a6dd0a5ca58ddaa83c69bb166c94bb2d859ec8255efe06565c4a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Adobe
Adobe
added 2025/04/08 12:0 a.m.27 views

APSB25-27 : Security update available for Adobe Experience Manager Forms

Adobe has released security updates for AEM Forms on JEE versions for a dependency on vulnerable Third-Party Component . This dependency update resolves an important vulnerability that could lead to path traversal and case sensitive match exception...

5.5AI score
SaveExploits0Affected Software1
Rows per page
Query Builder