4633 matches found
CVE-2026-82011
Adobe Campaign Classic (ACC) is affected by an SQL Injection vulnerability (CWE-89) caused by the improper neutralization of special elements used in an SQL command. A low-privileged attacker can exploit this issue without user interaction to bypass security features and gain unauthorized read an...
APSB26-150 : Security update available for Adobe Connect
Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, arbitrary file system read, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild for any ...
APSB26-151 : Security updates available for Adobe Experience Manager (AEM) Forms
Adobe has released a security update for Adobe Experience Manager Forms on Java Enterprise Edition JEE. This update addresses critical vulnerabilities that could result in arbitrary code execution, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild f...
PT-2026-96938
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...
PT-2026-96941
Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper input validation issue allows for a security feature bypass. An attacker can exploit this to obtain unauthorized limited write access. This requires user...
Adobe Premiere Pro < 25.6.6 / 26.0.0 < 26.5.0 Security feature bypass (APSB26-157) (macOS)
The version of Adobe Premiere Pro installed on the remote macOS host is prior to 25.6.6, 26.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB26-157 advisory. - Server-Side Request Forgery SSRF CWE-918 potentially leading to Security feature bypass CVE-2026-84395 Note th...
APSB26-157 : Security Updates Available for Adobe Premiere Pro
Adobe has released updates for Adobe Premiere Pro for Windows and macOS. This update addresses critical vulnerability that could result in security feature bypass. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...
APSB26-147 : Security updates available for Content Credentials SDK
Adobe has released a security update for Content Credentials SDK. This update addresses critical and important vulnerabilities that could result in security feature bypass and application denial-of-service. Adobe is not aware of any exploits in the wild for any of the issues addressed in this...
PT-2026-96939
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
RockyLinux 10 : curl (RLSA-2026:69125)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69125 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 curl: curl: Information disclosure via incorrect .netrc...
AlmaLinux 10 : curl (ALSA-2026:69125)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69125 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 curl: curl: Information disclosure via incorrect .netrc...
Adobe Premiere Pro < 25.6.6 / 26.0.0 < 26.5.0 Security feature bypass (APSB26-157)
The version of Adobe Premiere Pro installed on the remote Windows host is prior to 25.6.6, 26.5.0. It is, therefore, affected by a vulnerability as referenced in the APSB26-157 advisory. - Server-Side Request Forgery SSRF CWE-918 potentially leading to Security feature bypass CVE-2026-84395 Note...
CVE-2026-75634: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...
CVE-2026-19480: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
CVE-2026-75638: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
CVE-2026-82011: Improper Neutralization of Special Elements used in an SQL Command
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthoriz...
CVE-2026-76194: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...
CVE-2026-75743: Cross-Site Request Forgery (CSRF)
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to...
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse
A flaw was found in curl. The libcurl library, used for transferring data with URLs, could improperly reuse existing network connections. This occurred even when changes to mutual Transport Layer Security mTLS settings, particularly those for client certificates, should have prevented such reuse...
Important: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...