4379 matches found
CVE-2025-54266: Improper Neutralization of Input During Web Page Generation
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...
CVE-2025-61797: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...
PT-2025-42200
Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4-p15 and earlier Adobe Commerce versions 2.4.5-p14 Adobe Commerce versions 2.4.6-p12 Adobe Commerce versions 2.4.7-p7 Adobe Commerce versions 2.4.8-p2 Adobe Commerce versions 2.4.9-alpha2 Description The software i...
PT-2025-42206
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 11.6 and earlier Description A stored Cross-Site Scripting XSS issue exists in Adobe Experience Manager. A low privileged attacker could inject malicious scripts into vulnerable form fields. Execution of...
Allocation of Resources Without Limits or Throttling
Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...
CVE-2025-61771 Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser stores non-file form fields parts without a filename entirely in memory as Ruby String objects. A single large text field in a multipart/form-data request hundreds of megabytes or...
CVE-2025-61771 Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser stores non-file form fields parts without a filename entirely in memory as Ruby String objects. A single large text field in a multipart/form-data request hundreds of megabytes or...
EUVD-2000-0103
Malware in sbrugna...
EUVD-2000-0107
Malware in sbrugna...
EUVD-2002-2280
Malware in sbrugna...
EUVD-2002-0254
Malware in sbrugna...
EUVD-2002-0136
Malware in sbrugna...
EUVD-2006-6221
Malware in sbrugna...
EUVD-2000-0252
Malware in sbrugna...
EUVD-2000-0136
Malware in sbrugna...
EUVD-2004-2050
Malware in sbrugna...
EUVD-2000-0105
Malware in sbrugna...
EUVD-2006-1483
Malware in sbrugna...