1466 matches found
Academy LMS 6.0 - Cross-Site Scripting
Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...
CVE-2026-65444
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60...
CVE-2026-65444
The Creative Themes Blocksy Companion WordPress plugin (versions
EUVD-2026-114002
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60...
CVE-2026-65444 WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60...
CVE-2026-65444: Creative Themes Blocksy Companion: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes…
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60...
PT-2026-133612
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60...
CVE-2026-104349
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
CVE-2026-104349 Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
CVE-2026-104349 Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
EUVD-2026-111117
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
CVE-2026-104349
Adobe Creative Cloud Desktop for Windows is affected by an Uncontrolled Search Path Element vulnerability (CWE-427 ). A low-privileged attacker could exploit this flaw to achieve arbitrary code execution in the context of the current user by tricking a victim into opening a malicious file. Adobe ...
Vulnerability related to Adobe Creative Cloud Desktop permission and access control issues
Adobe Creative Cloud Desktop versions 6.10.0.252.41 and earlier contain a permission and access control vulnerability stemming from uncontrolled search path elements. This vulnerability may allow low-privilege attackers to execute arbitrary code when a user interacts with a malicious file...
CVE-2026-104349: Uncontrolled Search Path Element
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
PT-2026-126676
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
Adobe Creative Cloud < 6.11 Privilege escalation (APSB26-135)
The version of Adobe Creative Cloud installed on the remote Windows host is prior to 6.11. It is, therefore, affected by a vulnerability as referenced in the APSB26-135 advisory. - Uncontrolled Search Path Element CWE-427 potentially leading to Privilege escalation CVE-2026-104349 Note that Nessu...
APSB26-135 : Security update available for Adobe Creative Cloud Desktop Application
Adobe has released a priority 3 update for the Creative Cloud Desktop for Windows. This update resolves a vulnerability rated high that could result in privilege escalation in the context of the user. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...
CVE-2026-63243
An authentication vulnerability in the Bluetooth Low Energy BLE implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication...
CVE-2026-55981
A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device...
EUVD-2026-108607
An authentication vulnerability in the Bluetooth Low Energy BLE implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication...