CVEs published June 10, 2025
488 CVEs were published on June 10, 2025: 15 critical, 130 high. 2 are now in CISA KEV.
- Published
- 488
- Critical
- 15
- High
- 130
- Medium
- 334
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 132
Most affected products
- Adobe Experience Manager
- 224
- Microsoft Windows
- 36
- Adobe Acrobat Reader
- 10
- Adobe InDesign Desktop
- 9
- Dmacroweb DM Corporative CMS
- 9
- Dell Wyse Management Suite
- 6
- Apache Software Foundation Apache CloudStack
- 5
- Microsoft 365 Apps for Enterprise · Microsoft Office
- 5
- Salesforce OmniStudio
- 5
- TOTOLINK EX1200T
- 5
Critical 15
- CVE-2025-36852Build Cache Poisoning via Untrusted Pull RequestsNiklas Portmann Azure Based Remote Cache Plugin for Nx ·… +6
- CVE-2025-2474Vulnerability in PCX Image Codec Impacts QNX Software Development PlatformBlackBerry QNX Software Development Platform
- CVE-2025-40585A vulnerability has been identified in Energy Services (All versions with G5DFR).Siemens Energy Services
- CVE-2025-30220GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handlinggeoserver · org.geoserver.web:gs-web-app +1
- CVE-2024-34711GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)geoserver · org.geoserver.web:gs-web-app +1
- CVE-2025-49455WordPress WordPress-WPJobBoard <= 25.07010000-WP6.8.1-JB5.11.5 - SQL Injection VulnerabilityClickandPledge WordPress-WPJobBoard
- CVE-2025-49507WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerabilityLoftOcean CozyStay
- CVE-2025-43698Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for SSalesforce OmniStudio
- CVE-2025-40657SQL injection vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-40656SQL injection vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-40655SQL injection vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-40654SQL injection vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-1041Avaya Call Management System RCE vulnerabilityAvaya Call Management System
- CVE-2025-42989Missing Authorization check in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
- CVE-2024-57190Erxes <1.6.1 is vulnerable to Incorrect Access Control.erxes
High 130
- CVE-2024-9062macOS Archify: Local Privilege EscalationArchify
- CVE-2024-7457macOS Stash network-management utility: Unauthorized Manipulation of System Network PreferencesStash
- CVE-2025-32717Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2025-26521Apache CloudStack: CKS cluster in project exposes user API keysApache Software Foundation Apache CloudStack
- CVE-2025-47849Apache CloudStack: Insecure access of user's API/Secret Keys in the same domainApache Software Foundation Apache CloudStack
- CVE-2025-47713Apache CloudStack: Domain Admin can reset Admin password in Root DomainApache Software Foundation Apache CloudStack
- CVE-2025-46840Adobe Experience Manager | Improper Authorization (CWE-285)Adobe Experience Manager
- CVE-2025-46837Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-5978Tenda FH1202 VirtualSer fromVirtualSer stack-based overflowTenda FH1202
- CVE-2025-35940Hard-coded ArchiverSpaApi JWT Signing KeyGFI Archiver
- CVE-2025-3052An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.DT Research BiosFlashShell · DT Research Dtbios
- CVE-2025-43573Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2025-43577Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2025-43550Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2025-43575Acrobat Reader | Out-of-bounds Write (CWE-787)Adobe Acrobat Reader
- CVE-2025-43574Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2025-43576Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat Reader
- CVE-2025-47107InCopy | Heap-based Buffer Overflow (CWE-122)Adobe InCopy
- CVE-2025-30327InCopy | Integer Overflow or Wraparound (CWE-190)Adobe InCopy
- CVE-2025-5943MicroDicom DICOM Viewer Out-of-bounds WriteMicroDicom DICOM Viewer
- CVE-2025-0052FlashBlade DOS VulnerabilityPure Storage FlashBlade
- CVE-2025-0051FlashArray DOS VulnerabilityPure Storage FlashArray
- CVE-2025-36574Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability.Dell Wyse Management Suite
- CVE-2025-43581Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Sampler
- CVE-2025-43588Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Sampler
- CVE-2025-36575Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability.Dell Wyse Management Suite
- CVE-2025-47977Nuance Digital Engagement Platform Spoofing VulnerabilityMicrosoft Nuance Digital Engagement Platform
- CVE-2025-47968Microsoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityMicrosoft AutoUpdate for Mac
- CVE-2025-47176Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-47175Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-47174Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-47173Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-47172Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-47170Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2025-47169Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2025-47168Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2025-47167Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-47166Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-47165Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-47164Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-47163Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-33073Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-33070Windows Netlogon Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-33068Windows Standards-Based Storage Management Service Denial of Service VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2025-33056Windows Local Security Authority (LSA) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-33053Internet Shortcut Files Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-33050DHCP Server Service Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-32725DHCP Server Service Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-47962Windows SDK Elevation of Privilege VulnerabilityMicrosoft Windows SDK
- CVE-2025-33071Windows KDC Proxy Service (KPSSVC) Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2025-47955Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47953Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-47162Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-33075Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-33067Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-33066Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-33064Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-32724Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-32721Windows Recovery Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32718Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32716Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32714Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32713Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32712Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-32710Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-29828Windows Schannel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-47957Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2024-43706Kibana Improper AuthorizationElastic Kibana
- CVE-2025-31104A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 througFortinet FortiADC
- CVE-2025-5969D-Link DIR-632 HTTP POST Request biurl_grou FUN_00425fd8 stack-based overflowD-Link DIR-632
- CVE-2025-33112IBM AIX command executionIBM AIX · IBM VIOS
- CVE-2025-47108Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2025-43589InDesign Desktop | Use After Free (CWE-416)Adobe InDesign Desktop
- CVE-2025-30317InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-43558InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-43593InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-43590InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2023-20599Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) reAMD EPYC™ 7002 Series Processors · AMD Ryzen™ Threadripp… +8
- CVE-2025-43586Adobe Commerce | Improper Access Control (CWE-284)Adobe Commerce
- CVE-2025-47110Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · magento/community-edition
- CVE-2025-43585Adobe Commerce | Improper Authorization (CWE-285)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-4678Remote Code Execution leads to Command InjectionPandora FMS Pandora ITSM
- CVE-2025-4653Remote Code Execution leads to Command InjectionPandora FMS Pandora ITSM
- CVE-2025-40591A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2025-37100Exposure of Sensitive Information to an Unauthorized User in HPE Aruba Networking Private 5G CoreHewlett Packard Enterprise (HPE) HPE Aruba Networking Priva…
- CVE-2025-30145GeoServer has an Infinite Loop Vulnerability in Jiffle processgeoserver · org.geoserver.web:gs-web-app +2
- CVE-2025-5335Privilege Ecalation due to Untrusted Search Path VulnerabilityAutodesk Installer
- CVE-2025-26395SolarWinds SWOSH DOM-based reflective XSS VulnerabilitySolarWinds Observability Self-Hosted
- CVE-2025-5353A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentialIvanti Workspace Control
- CVE-2025-22463A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environmenIvanti Workspace Control
- CVE-2025-22455A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentialsIvanti Workspace Control
- CVE-2024-29198GeoServer Vulnerable to Unauthenticated SSRF via TestWfsPostgeoserver · org.geoserver:gs-wfs +1
- CVE-2025-49454WordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerabilityLoftOcean TinySalt
- CVE-2025-49511WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerabilityuxper Civi Framework
- CVE-2025-43697Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data.Salesforce OmniStudio
- CVE-2025-43701Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data.Salesforce OmniStudio
- CVE-2025-43700Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data.Salesforce OmniStudio
- CVE-2024-13090Privilege escalation in Guardian/CMC before 24.6.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2024-13089Authenticated RCE in update functionality in Guardian/CMC before 24.6.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-4681Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affectupKeeper Solutions upKeeper Instant Privilege Access
- CVE-2025-4680Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured AccupKeeper Solutions upKeeper Instant Privilege Access
- CVE-2025-3116CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends specialSchneider Electric Modicon Controllers M241/M251 · Schneide…
- CVE-2025-3112CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sendSchneider Electric Modicon Controllers M241/M251
- CVE-2025-3898CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS rSchneider Electric Modicon Controllers M241/M251 · Schneide…
- CVE-2025-5743CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remSchneider Electric EVLink WallBox
- CVE-2025-5740CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file Schneider Electric EVLink WallBox
- CVE-2025-27817Apache Kafka Client: Arbitrary file read and SSRF vulnerabilityApache Software Foundation Apache Kafka Client · org.apache…
- CVE-2025-27819Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configurationApache Software Foundation Apache Kafka · org.apache.kaf… +7
- CVE-2025-27818Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configurationApache Software Foundation Apache Kafka · org.apache.kaf… +2
- CVE-2025-4954Axle Demo Importer <= 1.0.3 - Author+ Arbitrary File UploadAxle Demo Importer
- CVE-2025-4840Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injectioninprosysmedia-likes-dislikes-post
- CVE-2025-4601RH - Real Estate WordPress Theme <= 4.4.0 - Authenticated (Subscriber+) Privilege EscalationInspiryThemes RH - Real Estate WordPress Theme
- CVE-2025-4387Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File UploadTyche Softwares Abandoned Cart Pro for WooCommerce
- CVE-2025-5934Netgear EX3700 mtd sub_41619C stack-based overflowNetgear EX3700
- CVE-2025-5912D-Link DIR-632 HTTP POST Request do_file stack-based overflowD-Link DIR-632
- CVE-2025-5911TOTOLINK EX1200T HTTP POST Request formDMZ buffer overflowTOTOLINK EX1200T
- CVE-2025-5910TOTOLINK EX1200T HTTP POST Request formWsc buffer overflowTOTOLINK EX1200T
- CVE-2025-5909TOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflowTOTOLINK EX1200T
- CVE-2025-5908TOTOLINK EX1200T HTTP POST Request formIpQoS buffer overflowTOTOLINK EX1200T
- CVE-2025-5907TOTOLINK EX1200T HTTP POST Request formFilter buffer overflowTOTOLINK EX1200T
- CVE-2025-42995Multiple vulnerabilities in SAP MDM ServerSAP_SE SAP MDM Server
- CVE-2025-42994Multiple vulnerabilities in SAP MDM ServerSAP_SE SAP MDM Server
- CVE-2025-42983Missing Authorization check in SAP Business Warehouse and SAP Plug-In BasisSAP_SE SAP Business Warehouse and SAP Plug-In Basis
- CVE-2025-42982Information Disclosure in SAP GRC (AC Plugin)SAP_SE SAP GRC
- CVE-2025-42977Directory Traversal vulnerability in SAP NetWeaver Visual ComposerSAP_SE SAP NetWeaver Visual Composer
- CVE-2025-23192Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace)SAP_SE SAP BusinessObjects Business Intelligence
- CVE-2025-5905TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflowTOTOLINK T10
- CVE-2025-5904TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflowTOTOLINK T10
- CVE-2025-44044Keyoti SearchUnit prior to 9.0.0.
- CVE-2025-46612The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/wor
Medium, low and unrated 343
- CVE-2025-1055K7 Security Anti-Malware: IOCTL in K7RKScan.sys Allows Arbitrary Termination of High-Privilege and System Processes by a Low-Privilege UserK7 Security Anti-Malware
- CVE-2024-8270macOS Rocket.Chat: TCC Policy Bypass via Dylib Injection Due to Missing Code Signing Flags and Dangerous EntitlementsRocket.Chat Desktop
- CVE-2025-30675Apache CloudStack: Unauthorised template/ISO list access to the domain/resource adminsApache Software Foundation Apache CloudStack
- CVE-2025-22829Apache CloudStack: Unauthorised access to dedicated resources in Quota pluginApache Software Foundation Apache CloudStack
- CVE-2025-5985code-projects School Fees Payment System improper authenticationcode-projects School Fees Payment System
- CVE-2025-5984SourceCodester Online Student Clearance System add-fee.php cross site scriptingSourceCodester Online Student Clearance System
- CVE-2025-46995Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46917Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46901Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47052Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46954Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47077Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47091Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47065Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47015Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47029Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47060Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46951Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46985Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46874Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47075Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46971Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46997Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46922Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46882Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46991Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47016Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46978Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46878Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47073Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47041Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46838Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46942Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46949Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46989Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46981Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46905Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47050Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46918Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46976Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47085Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47115Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47096Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
- CVE-2025-47092Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47057Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46910Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46903Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46979Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46845Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46999Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47114Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47040Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47074Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47017Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47034Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47006Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47027Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47067Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46957Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46974Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46947Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47080Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46887Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47045Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47026Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46990Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46895Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46890Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46923Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46924Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46988Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46975Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46956Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46848Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46982Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47071Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47039Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46906Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46850Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46939Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46871Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47036Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46915Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47056Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46888Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47066Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46855Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47004Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46872Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47070Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47079Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46841Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46919Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47019Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47021Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47038Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46880Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47012Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46913Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46854Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46909Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46927Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47116Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47062Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46902Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46965Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46900Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46952Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47082Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46899Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47020Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47005Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46948Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46876Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46931Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47022Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46945Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46904Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46860Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47048Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46879Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47069Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47081Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47033Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46941Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46986Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46898Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46893Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46929Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46983Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46916Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46953Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47032Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46861Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46926Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47008Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47044Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47014Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46943Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46889Adobe Experience Manager | Improper Access Control (CWE-284)Adobe Experience Manager
- CVE-2025-46946Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47031Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47094Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47090Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47084Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47002Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46857Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47089Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46967Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46873Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46963Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47068Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46891Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47000Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47042Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47072Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46859Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46987Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47030Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46970Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46884Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46846Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46847Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46864Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46842Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46886Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46964Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46920Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46870Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46875Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47047Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47113Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46851Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46863Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46858Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46977Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46866Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46885Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47087Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47011Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46935Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47055Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46940Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46992Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46944Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46955Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47037Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47063Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46911Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47013Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47007Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47083Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47076Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46843Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46933Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46914Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47025Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46894Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47088Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46883Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47010Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46968Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46865Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46844Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46853Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46907Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46930Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47078Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46972Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46984Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47051Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46881Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47086Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46966Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47117Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46950Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47049Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46908Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46892Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46877Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47093Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47003Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46973Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46934Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46960Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-47035Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46912Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-46862Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-5980code-projects Restaurant Order System order.php sql injectioncode-projects Restaurant Order System
- CVE-2025-5979code-projects School Fees Payment System branch.php sql injectioncode-projects School Fees Payment System
- CVE-2025-5977code-projects School Fees Payment System datatable.php sql injectioncode-projects School Fees Payment System
- CVE-2025-5976PHPGurukul Rail Pass Management System add-pass.php cross site scriptingPHPGurukul Rail Pass Management System
- CVE-2025-49133Libtpms contains a possible out-of-bound access and abort due to HMAC signing issuestefanberger libtpms
- CVE-2025-5975PHPGurukul Rail Pass Management System download-pass.php cross site scriptingPHPGurukul Rail Pass Management System
- CVE-2025-5974PHPGurukul Restaurant Table Booking System check-status.php cross site scriptingPHPGurukul Restaurant Table Booking System
- CVE-2025-47111Acrobat Reader | NULL Pointer Dereference (CWE-476)Adobe Acrobat Reader
- CVE-2025-43579Acrobat Reader | Information Exposure (CWE-200)Adobe Acrobat Reader
- CVE-2025-47112Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2025-43578Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat Reader
- CVE-2025-5973PHPGurukul Restaurant Table Booking System add-table.php cross site scriptingPHPGurukul Restaurant Table Booking System
- CVE-2025-5972PHPGurukul Restaurant Table Booking System manage-subadmins.php cross site scriptingPHPGurukul Restaurant Table Booking System
- CVE-2025-5971code-projects School Fees Payment System ajx.php sql injectioncode-projects School Fees Payment System
- CVE-2025-36576Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF) vulnerability.Dell Wyse Management Suite
- CVE-2025-36577Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site SDell Wyse Management Suite
- CVE-2025-36580Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site SDell Wyse Management Suite
- CVE-2025-36578Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Incorrect Authorization vulnerability.Dell Wyse Management Suite
- CVE-2025-2884Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementationTrusted Computing Group TPM2.0
- CVE-2025-47171Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-33069Windows App Control for Business Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-33057Windows Local Security Authority (LSA) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-33055Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-33052Windows DWM Core Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24065Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24069Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-24068Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-47969Windows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-47956Windows Security App Spoofing VulnerabilityMicrosoft Windows Security App
- CVE-2025-47160Windows Shortcut Files Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-33065Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-33063Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-33062Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-33061Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-33060Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-33059Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-33058Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-32722Windows Storage Port Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-32720Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-32719Windows Storage Management Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-32715Remote Desktop Protocol Client Information Disclosure VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2025-5970PHPGurukul Restaurant Table Booking System add-subadmin.php cross site scriptingPHPGurukul Restaurant Table Booking System
- CVE-2024-50568A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and beforeFortinet FortiOS · Fortinet FortiProxy
- CVE-2025-25250An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0Fortinet FortiOS · Fortinet FortiSASE
- CVE-2023-29184An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.Fortinet FortiProxy · Fortinet FortiOS
- CVE-2023-48786A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an aFortinet FortiClientEMS
- CVE-2025-24471An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP veriFortinet FortiOS
- CVE-2025-22254An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6,Fortinet FortiOS · Fortinet FortiProxy +1
- CVE-2025-22256A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1Fortinet FortiPAM · Fortinet FortiSRA
- CVE-2024-32119An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacFortinet FortiClientEMS
- CVE-2025-22251An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 alFortinet FortiOS
- CVE-2024-50562An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and belFortinet FortiOS · Fortinet FortiPAM +1
- CVE-2024-54019A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 Fortinet FortiClientWindows
- CVE-2024-45329A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 Fortinet FortiPortal
- CVE-2025-30321InDesign Desktop | NULL Pointer Dereference (CWE-476)Adobe InDesign Desktop
- CVE-2025-47105InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2025-47104InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2025-47106InDesign Desktop | Use After Free (CWE-416)Adobe InDesign Desktop
- CVE-2025-27206Adobe Commerce | Improper Access Control (CWE-284)Adobe Commerce · magento/project-community-edition +1
- CVE-2025-27207Adobe Commerce | Improper Access Control (CWE-284)Adobe Commerce
- CVE-2025-49143Nautobot may allows uploaded media files to be accessible without authenticationnautobot
- CVE-2025-49142Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templatingnautobot
- CVE-2025-48937matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administratormatrix-org matrix-rust-sdk · matrix-sdk-crypto
- CVE-2025-48879OctoPrint Vulnerable to Denial of Service through malformed HTTP requestOctoPrint
- CVE-2025-48067OctoPrint vulnerable to possible file extraction via upload endpointsOctoPrint
- CVE-2025-40569A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All vSiemens RUGGEDCOM RST2428P · Siemens SCALANCE XCH328 +5
- CVE-2025-40568A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All vSiemens RUGGEDCOM RST2428P · Siemens SCALANCE XCH328 +5
- CVE-2025-40567A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All vSiemens RUGGEDCOM RST2428P · Siemens SCALANCE XCH328 +5
- CVE-2024-41797A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All Siemens RUGGEDCOM RST2428P · Siemens SCALANCE XC316-8 +17
- CVE-2025-27505GeoServer Missing Authorization on REST API Indexgeoserver · org.geoserver.web:gs-web-app +1
- CVE-2024-40625GeoServer Coverage REST API Allows Server Side Request Forgerygeoserver · org.geoserver:gs-rest +1
- CVE-2024-38524GWC Home Page communicate version and revision informationgeoserver · org.geoserver.web:gs-web-app +1
- CVE-2025-26394SolarWinds SWOSH Open Redirection VulnerabilitySolarWinds Observability Self-Hosted
- CVE-2025-49509WordPress Audio Editor & Recorder plugin <= 2.2.1 - Broken Access Control vulnerabilityRoland Beaussant Audio Editor & Recorder
- CVE-2025-49510WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityWPFactory Min Max Step Quantity Limits Manager for WooComme…
- CVE-2025-43699Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission checSalesforce OmniStudio
- CVE-2025-4577Smash Balloon Custom Facebook Feed <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attributesmub Smash Balloon Social Post Feed – Simple Social Feeds f…
- CVE-2025-2918Ultimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetsultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for B…
- CVE-2025-4774Premium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgetleap13 Premium Addons for Elementor – Powerful Elementor Te…
- CVE-2025-41657AUMA: Incorrect delivery status of the Bluetooth configurationAuma AC1.2 · Auma PROFOX
- CVE-2025-40662Absolute path disclosure vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-40661Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-40660Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-40659Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-40658Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMSDmacroweb DM Corporative CMS
- CVE-2025-3117CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration fiSchneider Electric Modicon Controllers M241/M251 · Schneide…
- CVE-2025-3905CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system variaSchneider Electric Modicon Controllers M241/M251 · Schneide…
- CVE-2025-3899CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on WeSchneider Electric Modicon Controllers M241/M251
- CVE-2025-5742CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated userSchneider Electric EVLink WallBox
- CVE-2025-5741CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file Schneider Electric EVLink WallBox
- CVE-2025-5952Zend.To NSSDropoff.php exec os command injectionZend.To
- CVE-2025-5935Open5GS AMF/MME emm-sm.c common_register_state denial of serviceOpen5GS
- CVE-2025-3076Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://elementor.com/ Elementor Website Builder Pro
- CVE-2025-5925Bunny’s Print CSS <= 0.95 - Cross-Site Request Forgery to Settings Updatesteph Bunny’s Print CSS
- CVE-2025-5913PHPGurukul Vehicle Record Management System search-vehicle.php sql injectionPHPGurukul Vehicle Record Management System
- CVE-2025-5906code-projects Laundry System data missing authenticationcode-projects Laundry System
- CVE-2025-42998Security misconfiguration vulnerability in SAP Business One Integration FrameworkSAP_SE SAP Business One Integration Framework
- CVE-2025-42996Multiple vulnerabilities in SAP MDM ServerSAP_SE SAP MDM Server
- CVE-2025-42993Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement)SAP_SE SAP S/4HANA
- CVE-2025-42991Missing Authorization check in SAP S/4HANA (Bank Account Application)SAP_SE SAP S/4HANA
- CVE-2025-42990HTML Injection in Unprotected SAPUI5 applicationsSAP_SE SAPUI5 applications
- CVE-2025-42988Server-Side Request Forgery in SAP Business Objects Business Intelligence PlatformSAP_SE SAP Business Objects Business Intelligence Platform
- CVE-2025-42987Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement)SAP_SE SAP S/4HANA
- CVE-2025-42984Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application)SAP_SE SAP S/4HANA
- CVE-2025-31325Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation)SAP_SE SAP NetWeaver
- CVE-2024-37394A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users to execute arbitrary
- CVE-2024-37395A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbit
- CVE-2024-37396A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users to execute arbitrary
- CVE-2024-41502Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the form field "Observaces" (observances) in the "
- CVE-2024-41503Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field "Ttulo" (title) inside the filter Save op
- CVE-2024-41504Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2024-41505Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the "Pessoas" (persons) section via the field "Prof
- CVE-2024-57186In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-fileerxes
- CVE-2024-57189In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHisterxes
- CVE-2025-44043Keyoti SearchUnit prior to 9.0.0.