CVE-2025-42963 Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )

A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...

PT-2025-28740 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D Viewer versions 0.22 and earlier Description: The issue is related to a NULL Pointer Dereference that could lead to application denial-of-service. An attacker could exploit this to crash the application and cause disruption in...

PT-2025-28739 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.22 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, wher...

Adobe Substance3D Viewer 安全漏洞

Adobe Substance 3D Viewer is a standalone desktop application from Adobe for viewing and editing 3D files and seamlessly integrates with applications such as Photoshop to support non-destructive 2D/3D co-creation. Adobe Substance 3D Viewer suffers from a heap buffer overflow vulnerability that...

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the possibility of an operation occurring outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the fact that the processing of JP2 files may lead to data being written beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute...

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the PDF Preview module in the HarmonyOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the PDF Preview module in the HarmonyOS operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from an out-of-bounds read vulnerability, which can be exploited by attackers to cause a sensitive memory leak...

PT-2025-28756 · Unknown · Config Pages Viewer

Name of the Vulnerable Software and Affected Versions: Config Pages Viewer versions 0.0.0 through 1.0.4 Description: The issue is related to missing authentication for critical functions in Config Pages Viewer, which can be exploited due to incorrectly configured access control security levels...

PT-2025-28741 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.22 and earlier Description: The issue is an out-of-bounds read that could lead to disclosure of sensitive memory. Exploitation requires user interaction, where a victim must open a malicious file...

PT-2025-28282 · Sap · Sap Netweaver Application Server For Java Log Viewer

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application server for Java affected versions not specified Description: A critical issue in the Log Viewer component enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitati...

Drupal Config Pages Viewer 安全漏洞

Drupal Config Pages Viewer is a configuration viewer for the Drupal community. A security vulnerability exists in Drupal Config Pages Viewer versions prior to 1.0.4, which stems from a lack of authentication for critical functions and could lead to improper access control...

Adobe Substance3D Viewer 代码问题漏洞

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from a null pointer dereference vulnerability that can be exploited by attackers to cause a denial of service in the application...

APSB25-54 : Security update available for Adobe Substance 3D Viewer

Adobe has released an update for Adobe Substance 3D Viewer. This update addresses critical and important vulnerabilities in Adobe Substance 3D Viewer. Successful exploitation could lead to arbitrary code execution, memory leak, and application denial-of-service...

SQL Injection

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to SQL Injection via the /key/block endpoint. A proxyadminviewer user can retrieve the contents of arbitrary files on the target filesystem by brute forcing them one character...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system, related to writing beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code...

Drupal Config Pages Viewer module < 1.0.4 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Config Pages Viewer versions 1.0.4...

PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2025-21928)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute code in the context of the current process...