# CVEs published 2025-06-10

488 CVEs were published on June 10, 2025: 15 critical, 130 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2024-9062](https://cve.now/CVE-2024-9062.md): macOS Archify: Local Privilege Escalation (CVSS 7.8, Archify)
- [CVE-2025-1055](https://cve.now/CVE-2025-1055.md): K7 Security Anti-Malware: IOCTL in K7RKScan.sys Allows Arbitrary Termination of High-Privilege and System Processes by a Low-Privilege User (CVSS 5.6, K7 Security Anti-Malware)
- [CVE-2024-8270](https://cve.now/CVE-2024-8270.md): macOS Rocket.Chat: TCC Policy Bypass via Dylib Injection Due to Missing Code Signing Flags and Dangerous Entitlements (CVSS 5.5, Rocket.Chat Desktop)
- [CVE-2024-7457](https://cve.now/CVE-2024-7457.md): macOS Stash network-management utility: Unauthorized Manipulation of System Network Preferences (CVSS 7.8, Stash)
- [CVE-2025-32717](https://cve.now/CVE-2025-32717.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise)
- [CVE-2025-30675](https://cve.now/CVE-2025-30675.md): Apache CloudStack: Unauthorised template/ISO list access to the domain/resource admins (CVSS 4.7, Apache Software Foundation Apache CloudStack)
- [CVE-2025-22829](https://cve.now/CVE-2025-22829.md): Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin (CVSS 2.3, Apache Software Foundation Apache CloudStack)
- [CVE-2025-26521](https://cve.now/CVE-2025-26521.md): Apache CloudStack: CKS cluster in project exposes user API keys (CVSS 8.1, Apache Software Foundation Apache CloudStack)
- [CVE-2025-47849](https://cve.now/CVE-2025-47849.md): Apache CloudStack: Insecure access of user's API/Secret Keys in the same domain (CVSS 8.8, Apache Software Foundation Apache CloudStack)
- [CVE-2025-47713](https://cve.now/CVE-2025-47713.md): Apache CloudStack: Domain Admin can reset Admin password in Root Domain (CVSS 8.8, Apache Software Foundation Apache CloudStack)
- [CVE-2025-5985](https://cve.now/CVE-2025-5985.md): code-projects School Fees Payment System improper authentication (CVSS 6.9, code-projects School Fees Payment System)
- [CVE-2025-5984](https://cve.now/CVE-2025-5984.md): SourceCodester Online Student Clearance System add-fee.php cross site scripting (CVSS 5.1, SourceCodester Online Student Clearance System)
- [CVE-2025-46995](https://cve.now/CVE-2025-46995.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46917](https://cve.now/CVE-2025-46917.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46901](https://cve.now/CVE-2025-46901.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47052](https://cve.now/CVE-2025-47052.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46954](https://cve.now/CVE-2025-46954.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47077](https://cve.now/CVE-2025-47077.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47091](https://cve.now/CVE-2025-47091.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47065](https://cve.now/CVE-2025-47065.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47015](https://cve.now/CVE-2025-47015.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47029](https://cve.now/CVE-2025-47029.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47060](https://cve.now/CVE-2025-47060.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46951](https://cve.now/CVE-2025-46951.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46985](https://cve.now/CVE-2025-46985.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46874](https://cve.now/CVE-2025-46874.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47075](https://cve.now/CVE-2025-47075.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46971](https://cve.now/CVE-2025-46971.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46997](https://cve.now/CVE-2025-46997.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46922](https://cve.now/CVE-2025-46922.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46882](https://cve.now/CVE-2025-46882.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46991](https://cve.now/CVE-2025-46991.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47016](https://cve.now/CVE-2025-47016.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46978](https://cve.now/CVE-2025-46978.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46878](https://cve.now/CVE-2025-46878.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47073](https://cve.now/CVE-2025-47073.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47041](https://cve.now/CVE-2025-47041.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46838](https://cve.now/CVE-2025-46838.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46942](https://cve.now/CVE-2025-46942.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46949](https://cve.now/CVE-2025-46949.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46989](https://cve.now/CVE-2025-46989.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46981](https://cve.now/CVE-2025-46981.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46905](https://cve.now/CVE-2025-46905.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47050](https://cve.now/CVE-2025-47050.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46918](https://cve.now/CVE-2025-46918.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46976](https://cve.now/CVE-2025-46976.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47085](https://cve.now/CVE-2025-47085.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47115](https://cve.now/CVE-2025-47115.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47096](https://cve.now/CVE-2025-47096.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 3.5, Adobe Experience Manager)
- [CVE-2025-47092](https://cve.now/CVE-2025-47092.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47057](https://cve.now/CVE-2025-47057.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46910](https://cve.now/CVE-2025-46910.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46903](https://cve.now/CVE-2025-46903.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46979](https://cve.now/CVE-2025-46979.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46845](https://cve.now/CVE-2025-46845.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46999](https://cve.now/CVE-2025-46999.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47114](https://cve.now/CVE-2025-47114.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47040](https://cve.now/CVE-2025-47040.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47074](https://cve.now/CVE-2025-47074.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47017](https://cve.now/CVE-2025-47017.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47034](https://cve.now/CVE-2025-47034.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47006](https://cve.now/CVE-2025-47006.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47027](https://cve.now/CVE-2025-47027.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47067](https://cve.now/CVE-2025-47067.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46957](https://cve.now/CVE-2025-46957.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46974](https://cve.now/CVE-2025-46974.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46947](https://cve.now/CVE-2025-46947.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47080](https://cve.now/CVE-2025-47080.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46887](https://cve.now/CVE-2025-46887.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47045](https://cve.now/CVE-2025-47045.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47026](https://cve.now/CVE-2025-47026.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46990](https://cve.now/CVE-2025-46990.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46895](https://cve.now/CVE-2025-46895.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46890](https://cve.now/CVE-2025-46890.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46923](https://cve.now/CVE-2025-46923.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46924](https://cve.now/CVE-2025-46924.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46988](https://cve.now/CVE-2025-46988.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46975](https://cve.now/CVE-2025-46975.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46956](https://cve.now/CVE-2025-46956.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46848](https://cve.now/CVE-2025-46848.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46982](https://cve.now/CVE-2025-46982.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47071](https://cve.now/CVE-2025-47071.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47039](https://cve.now/CVE-2025-47039.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46906](https://cve.now/CVE-2025-46906.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46850](https://cve.now/CVE-2025-46850.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46939](https://cve.now/CVE-2025-46939.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46871](https://cve.now/CVE-2025-46871.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47036](https://cve.now/CVE-2025-47036.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46915](https://cve.now/CVE-2025-46915.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47056](https://cve.now/CVE-2025-47056.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46888](https://cve.now/CVE-2025-46888.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47066](https://cve.now/CVE-2025-47066.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46855](https://cve.now/CVE-2025-46855.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47004](https://cve.now/CVE-2025-47004.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46872](https://cve.now/CVE-2025-46872.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47070](https://cve.now/CVE-2025-47070.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47079](https://cve.now/CVE-2025-47079.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46841](https://cve.now/CVE-2025-46841.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46919](https://cve.now/CVE-2025-46919.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47019](https://cve.now/CVE-2025-47019.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47021](https://cve.now/CVE-2025-47021.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47038](https://cve.now/CVE-2025-47038.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46880](https://cve.now/CVE-2025-46880.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47012](https://cve.now/CVE-2025-47012.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46913](https://cve.now/CVE-2025-46913.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Experience Manager)
- [CVE-2025-46854](https://cve.now/CVE-2025-46854.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46909](https://cve.now/CVE-2025-46909.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46927](https://cve.now/CVE-2025-46927.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47116](https://cve.now/CVE-2025-47116.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47062](https://cve.now/CVE-2025-47062.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46902](https://cve.now/CVE-2025-46902.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46965](https://cve.now/CVE-2025-46965.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46900](https://cve.now/CVE-2025-46900.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46952](https://cve.now/CVE-2025-46952.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47082](https://cve.now/CVE-2025-47082.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46899](https://cve.now/CVE-2025-46899.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47020](https://cve.now/CVE-2025-47020.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47005](https://cve.now/CVE-2025-47005.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46948](https://cve.now/CVE-2025-46948.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46876](https://cve.now/CVE-2025-46876.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46931](https://cve.now/CVE-2025-46931.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47022](https://cve.now/CVE-2025-47022.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46945](https://cve.now/CVE-2025-46945.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46904](https://cve.now/CVE-2025-46904.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46860](https://cve.now/CVE-2025-46860.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47048](https://cve.now/CVE-2025-47048.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46879](https://cve.now/CVE-2025-46879.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47069](https://cve.now/CVE-2025-47069.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47081](https://cve.now/CVE-2025-47081.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47033](https://cve.now/CVE-2025-47033.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46941](https://cve.now/CVE-2025-46941.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46986](https://cve.now/CVE-2025-46986.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46898](https://cve.now/CVE-2025-46898.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46893](https://cve.now/CVE-2025-46893.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46929](https://cve.now/CVE-2025-46929.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46983](https://cve.now/CVE-2025-46983.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46916](https://cve.now/CVE-2025-46916.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46953](https://cve.now/CVE-2025-46953.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47032](https://cve.now/CVE-2025-47032.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46861](https://cve.now/CVE-2025-46861.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46926](https://cve.now/CVE-2025-46926.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47008](https://cve.now/CVE-2025-47008.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47044](https://cve.now/CVE-2025-47044.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47014](https://cve.now/CVE-2025-47014.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46943](https://cve.now/CVE-2025-46943.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46889](https://cve.now/CVE-2025-46889.md): Adobe Experience Manager | Improper Access Control (CWE-284) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46946](https://cve.now/CVE-2025-46946.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47031](https://cve.now/CVE-2025-47031.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47094](https://cve.now/CVE-2025-47094.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 6.1, Adobe Experience Manager)
- [CVE-2025-47090](https://cve.now/CVE-2025-47090.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47084](https://cve.now/CVE-2025-47084.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47002](https://cve.now/CVE-2025-47002.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46857](https://cve.now/CVE-2025-46857.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47089](https://cve.now/CVE-2025-47089.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46967](https://cve.now/CVE-2025-46967.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46873](https://cve.now/CVE-2025-46873.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46963](https://cve.now/CVE-2025-46963.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47068](https://cve.now/CVE-2025-47068.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46891](https://cve.now/CVE-2025-46891.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46840](https://cve.now/CVE-2025-46840.md): Adobe Experience Manager | Improper Authorization (CWE-285) (CVSS 8.7, Adobe Experience Manager)
- [CVE-2025-47000](https://cve.now/CVE-2025-47000.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47042](https://cve.now/CVE-2025-47042.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47072](https://cve.now/CVE-2025-47072.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46859](https://cve.now/CVE-2025-46859.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46987](https://cve.now/CVE-2025-46987.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47030](https://cve.now/CVE-2025-47030.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46970](https://cve.now/CVE-2025-46970.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46884](https://cve.now/CVE-2025-46884.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Experience Manager)
- [CVE-2025-46846](https://cve.now/CVE-2025-46846.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46847](https://cve.now/CVE-2025-46847.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46864](https://cve.now/CVE-2025-46864.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46842](https://cve.now/CVE-2025-46842.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46886](https://cve.now/CVE-2025-46886.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46964](https://cve.now/CVE-2025-46964.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46920](https://cve.now/CVE-2025-46920.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.6, Adobe Experience Manager)
- [CVE-2025-46870](https://cve.now/CVE-2025-46870.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46875](https://cve.now/CVE-2025-46875.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47047](https://cve.now/CVE-2025-47047.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47113](https://cve.now/CVE-2025-47113.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46851](https://cve.now/CVE-2025-46851.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46863](https://cve.now/CVE-2025-46863.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46858](https://cve.now/CVE-2025-46858.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46977](https://cve.now/CVE-2025-46977.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46866](https://cve.now/CVE-2025-46866.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46885](https://cve.now/CVE-2025-46885.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47087](https://cve.now/CVE-2025-47087.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47011](https://cve.now/CVE-2025-47011.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46935](https://cve.now/CVE-2025-46935.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47055](https://cve.now/CVE-2025-47055.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46940](https://cve.now/CVE-2025-46940.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46992](https://cve.now/CVE-2025-46992.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46944](https://cve.now/CVE-2025-46944.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46955](https://cve.now/CVE-2025-46955.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47037](https://cve.now/CVE-2025-47037.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47063](https://cve.now/CVE-2025-47063.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46911](https://cve.now/CVE-2025-46911.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 4.8, Adobe Experience Manager)
- [CVE-2025-47013](https://cve.now/CVE-2025-47013.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47007](https://cve.now/CVE-2025-47007.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47083](https://cve.now/CVE-2025-47083.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47076](https://cve.now/CVE-2025-47076.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46843](https://cve.now/CVE-2025-46843.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46933](https://cve.now/CVE-2025-46933.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46914](https://cve.now/CVE-2025-46914.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47025](https://cve.now/CVE-2025-47025.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46894](https://cve.now/CVE-2025-46894.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47088](https://cve.now/CVE-2025-47088.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46883](https://cve.now/CVE-2025-46883.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47010](https://cve.now/CVE-2025-47010.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46968](https://cve.now/CVE-2025-46968.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46865](https://cve.now/CVE-2025-46865.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46844](https://cve.now/CVE-2025-46844.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46853](https://cve.now/CVE-2025-46853.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46907](https://cve.now/CVE-2025-46907.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46930](https://cve.now/CVE-2025-46930.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47078](https://cve.now/CVE-2025-47078.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46972](https://cve.now/CVE-2025-46972.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46984](https://cve.now/CVE-2025-46984.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47051](https://cve.now/CVE-2025-47051.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46881](https://cve.now/CVE-2025-46881.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47086](https://cve.now/CVE-2025-47086.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46966](https://cve.now/CVE-2025-46966.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47117](https://cve.now/CVE-2025-47117.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46950](https://cve.now/CVE-2025-46950.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47049](https://cve.now/CVE-2025-47049.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 6.1, Adobe Experience Manager)
- [CVE-2025-46908](https://cve.now/CVE-2025-46908.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46837](https://cve.now/CVE-2025-46837.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.7, Adobe Experience Manager)
- [CVE-2025-46892](https://cve.now/CVE-2025-46892.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46877](https://cve.now/CVE-2025-46877.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47093](https://cve.now/CVE-2025-47093.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47003](https://cve.now/CVE-2025-47003.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46973](https://cve.now/CVE-2025-46973.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46934](https://cve.now/CVE-2025-46934.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46960](https://cve.now/CVE-2025-46960.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-47035](https://cve.now/CVE-2025-47035.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46912](https://cve.now/CVE-2025-46912.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-46862](https://cve.now/CVE-2025-46862.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager)
- [CVE-2025-5980](https://cve.now/CVE-2025-5980.md): code-projects Restaurant Order System order.php sql injection (CVSS 6.9, code-projects Restaurant Order System)
- [CVE-2025-5979](https://cve.now/CVE-2025-5979.md): code-projects School Fees Payment System branch.php sql injection (CVSS 6.9, code-projects School Fees Payment System)
- [CVE-2025-5978](https://cve.now/CVE-2025-5978.md): Tenda FH1202 VirtualSer fromVirtualSer stack-based overflow (CVSS 8.7, Tenda FH1202)
- [CVE-2025-35940](https://cve.now/CVE-2025-35940.md): Hard-coded ArchiverSpaApi JWT Signing Key (CVSS 8.1, GFI Archiver)
- [CVE-2025-5977](https://cve.now/CVE-2025-5977.md): code-projects School Fees Payment System datatable.php sql injection (CVSS 6.9, code-projects School Fees Payment System)
- [CVE-2025-5976](https://cve.now/CVE-2025-5976.md): PHPGurukul Rail Pass Management System add-pass.php cross site scripting (CVSS 5.1, PHPGurukul Rail Pass Management System)
- [CVE-2025-49133](https://cve.now/CVE-2025-49133.md): Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue (CVSS 5.9, stefanberger libtpms)
- [CVE-2025-5975](https://cve.now/CVE-2025-5975.md): PHPGurukul Rail Pass Management System download-pass.php cross site scripting (CVSS 5.3, PHPGurukul Rail Pass Management System)
- [CVE-2025-5974](https://cve.now/CVE-2025-5974.md): PHPGurukul Restaurant Table Booking System check-status.php cross site scripting (CVSS 5.1, PHPGurukul Restaurant Table Booking System)
- [CVE-2025-36852](https://cve.now/CVE-2025-36852.md): Build Cache Poisoning via Untrusted Pull Requests (CVSS 9.4, Niklas Portmann Azure Based Remote Cache Plugin for Nx ·… +6)
- [CVE-2025-3052](https://cve.now/CVE-2025-3052.md): An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc. (CVSS 8.2, DT Research BiosFlashShell · DT Research Dtbios)
- [CVE-2025-47111](https://cve.now/CVE-2025-47111.md): Acrobat Reader | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2025-43579](https://cve.now/CVE-2025-43579.md): Acrobat Reader | Information Exposure (CWE-200) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2025-43573](https://cve.now/CVE-2025-43573.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2025-43577](https://cve.now/CVE-2025-43577.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2025-43550](https://cve.now/CVE-2025-43550.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2025-47112](https://cve.now/CVE-2025-47112.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2025-43575](https://cve.now/CVE-2025-43575.md): Acrobat Reader | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2025-43578](https://cve.now/CVE-2025-43578.md): Acrobat Reader | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2025-43574](https://cve.now/CVE-2025-43574.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2025-43576](https://cve.now/CVE-2025-43576.md): Acrobat Reader | Use After Free (CWE-416) (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2025-47107](https://cve.now/CVE-2025-47107.md): InCopy | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-30327](https://cve.now/CVE-2025-30327.md): InCopy | Integer Overflow or Wraparound (CWE-190) (CVSS 7.8, Adobe InCopy)
- [CVE-2025-5973](https://cve.now/CVE-2025-5973.md): PHPGurukul Restaurant Table Booking System add-table.php cross site scripting (CVSS 4.8, PHPGurukul Restaurant Table Booking System)
- [CVE-2025-5972](https://cve.now/CVE-2025-5972.md): PHPGurukul Restaurant Table Booking System manage-subadmins.php cross site scripting (CVSS 4.8, PHPGurukul Restaurant Table Booking System)
- [CVE-2025-5971](https://cve.now/CVE-2025-5971.md): code-projects School Fees Payment System ajx.php sql injection (CVSS 5.3, code-projects School Fees Payment System)
- [CVE-2025-36576](https://cve.now/CVE-2025-36576.md): Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF) vulnerability. (CVSS 2.7, Dell Wyse Management Suite)
- [CVE-2025-36577](https://cve.now/CVE-2025-36577.md): Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site S (CVSS 6.1, Dell Wyse Management Suite)
- [CVE-2025-5943](https://cve.now/CVE-2025-5943.md): MicroDicom DICOM Viewer Out-of-bounds Write (CVSS 8.6, MicroDicom DICOM Viewer)
- [CVE-2025-0052](https://cve.now/CVE-2025-0052.md): FlashBlade DOS Vulnerability (CVSS 8.3, Pure Storage FlashBlade)
- [CVE-2025-36580](https://cve.now/CVE-2025-36580.md): Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site S (CVSS 6.1, Dell Wyse Management Suite)
- [CVE-2025-2474](https://cve.now/CVE-2025-2474.md): Vulnerability in PCX Image Codec Impacts QNX Software Development Platform (CVSS 9.8, BlackBerry QNX Software Development Platform)
- [CVE-2025-36578](https://cve.now/CVE-2025-36578.md): Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Incorrect Authorization vulnerability. (CVSS 6.8, Dell Wyse Management Suite)
- [CVE-2025-0051](https://cve.now/CVE-2025-0051.md): FlashArray DOS Vulnerability (CVSS 8.7, Pure Storage FlashArray)
- [CVE-2025-2884](https://cve.now/CVE-2025-2884.md): Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation (CVSS 6.6, Trusted Computing Group TPM2.0)
- [CVE-2025-36574](https://cve.now/CVE-2025-36574.md): Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. (CVSS 8.2, Dell Wyse Management Suite)
- [CVE-2025-43581](https://cve.now/CVE-2025-43581.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Sampler)
- [CVE-2025-43588](https://cve.now/CVE-2025-43588.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Sampler)
- [CVE-2025-36575](https://cve.now/CVE-2025-36575.md): Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. (CVSS 7.5, Dell Wyse Management Suite)
- [CVE-2025-47977](https://cve.now/CVE-2025-47977.md): Nuance Digital Engagement Platform Spoofing Vulnerability (CVSS 8.2, Microsoft Nuance Digital Engagement Platform)
- [CVE-2025-47968](https://cve.now/CVE-2025-47968.md): Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft AutoUpdate for Mac)
- [CVE-2025-47176](https://cve.now/CVE-2025-47176.md): Microsoft Outlook Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2025-47175](https://cve.now/CVE-2025-47175.md): Microsoft PowerPoint Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2025-47174](https://cve.now/CVE-2025-47174.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2025-47173](https://cve.now/CVE-2025-47173.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-47172](https://cve.now/CVE-2025-47172.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2025-47171](https://cve.now/CVE-2025-47171.md): Microsoft Outlook Remote Code Execution Vulnerability (CVSS 6.7, Microsoft 365 Apps for Enterprise · Microsoft Office +1)
- [CVE-2025-47170](https://cve.now/CVE-2025-47170.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2025-47169](https://cve.now/CVE-2025-47169.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2025-47168](https://cve.now/CVE-2025-47168.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2025-47167](https://cve.now/CVE-2025-47167.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-47166](https://cve.now/CVE-2025-47166.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2025-47165](https://cve.now/CVE-2025-47165.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel +1)
- [CVE-2025-47164](https://cve.now/CVE-2025-47164.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-47163](https://cve.now/CVE-2025-47163.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2025-33073](https://cve.now/CVE-2025-33073.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 8.8, KEV, Microsoft Windows)
- [CVE-2025-33070](https://cve.now/CVE-2025-33070.md): Windows Netlogon Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2025-33069](https://cve.now/CVE-2025-33069.md): Windows App Control for Business Security Feature Bypass Vulnerability (CVSS 5.1, Microsoft Windows)
- [CVE-2025-33068](https://cve.now/CVE-2025-33068.md): Windows Standards-Based Storage Management Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server 2012 R2 · Microsoft Windows Server)
- [CVE-2025-33057](https://cve.now/CVE-2025-33057.md): Windows Local Security Authority (LSA) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2025-33056](https://cve.now/CVE-2025-33056.md): Windows Local Security Authority (LSA) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2025-33055](https://cve.now/CVE-2025-33055.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-33053](https://cve.now/CVE-2025-33053.md): Internet Shortcut Files Remote Code Execution Vulnerability (CVSS 8.8, KEV, Microsoft Windows)
- [CVE-2025-33052](https://cve.now/CVE-2025-33052.md): Windows DWM Core Library Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-33050](https://cve.now/CVE-2025-33050.md): DHCP Server Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2025-32725](https://cve.now/CVE-2025-32725.md): DHCP Server Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2025-24065](https://cve.now/CVE-2025-24065.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-24069](https://cve.now/CVE-2025-24069.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-24068](https://cve.now/CVE-2025-24068.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-47969](https://cve.now/CVE-2025-47969.md): Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2025-47962](https://cve.now/CVE-2025-47962.md): Windows SDK Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows SDK)
- [CVE-2025-33071](https://cve.now/CVE-2025-33071.md): Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2025-47956](https://cve.now/CVE-2025-47956.md): Windows Security App Spoofing Vulnerability (CVSS 5.5, Microsoft Windows Security App)
- [CVE-2025-47955](https://cve.now/CVE-2025-47955.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-47953](https://cve.now/CVE-2025-47953.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-47162](https://cve.now/CVE-2025-47162.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office)
- [CVE-2025-47160](https://cve.now/CVE-2025-47160.md): Windows Shortcut Files Security Feature Bypass Vulnerability (CVSS 5.4, Microsoft Windows)
- [CVE-2025-33075](https://cve.now/CVE-2025-33075.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-33067](https://cve.now/CVE-2025-33067.md): Windows Task Scheduler Elevation of Privilege Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2025-33066](https://cve.now/CVE-2025-33066.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2025-33065](https://cve.now/CVE-2025-33065.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-33064](https://cve.now/CVE-2025-33064.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2025-33063](https://cve.now/CVE-2025-33063.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-33062](https://cve.now/CVE-2025-33062.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-33061](https://cve.now/CVE-2025-33061.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-33060](https://cve.now/CVE-2025-33060.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-33059](https://cve.now/CVE-2025-33059.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-33058](https://cve.now/CVE-2025-33058.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-32724](https://cve.now/CVE-2025-32724.md): Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2025-32722](https://cve.now/CVE-2025-32722.md): Windows Storage Port Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-32721](https://cve.now/CVE-2025-32721.md): Windows Recovery Driver Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2025-32720](https://cve.now/CVE-2025-32720.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-32719](https://cve.now/CVE-2025-32719.md): Windows Storage Management Provider Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2025-32718](https://cve.now/CVE-2025-32718.md): Windows SMB Client Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-32716](https://cve.now/CVE-2025-32716.md): Windows Media Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-32715](https://cve.now/CVE-2025-32715.md): Remote Desktop Protocol Client Information Disclosure Vulnerability (CVSS 6.5, Microsoft Remote Desktop client for Windows Desktop · Micro…)
- [CVE-2025-32714](https://cve.now/CVE-2025-32714.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-32713](https://cve.now/CVE-2025-32713.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-32712](https://cve.now/CVE-2025-32712.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2025-32710](https://cve.now/CVE-2025-32710.md): Windows Remote Desktop Services Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1)
- [CVE-2025-29828](https://cve.now/CVE-2025-29828.md): Windows Schannel Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2025-47957](https://cve.now/CVE-2025-47957.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2025-5970](https://cve.now/CVE-2025-5970.md): PHPGurukul Restaurant Table Booking System add-subadmin.php cross site scripting (CVSS 4.8, PHPGurukul Restaurant Table Booking System)
- [CVE-2024-43706](https://cve.now/CVE-2024-43706.md): Kibana Improper Authorization (CVSS 7.6, Elastic Kibana)
- [CVE-2024-50568](https://cve.now/CVE-2024-50568.md): A channel accessible by non-endpoint vulnerability \[CWE-300\] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before (CVSS 5.6, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2025-25250](https://cve.now/CVE-2025-25250.md): An Exposure of Sensitive Information to an Unauthorized Actor vulnerability \[CWE-200\] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 (CVSS 3.9, Fortinet FortiOS · Fortinet FortiSASE)
- [CVE-2023-29184](https://cve.now/CVE-2023-29184.md): An incomplete cleanup vulnerability \[CWE-459\] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7. (CVSS 3.1, Fortinet FortiProxy · Fortinet FortiOS)
- [CVE-2023-48786](https://cve.now/CVE-2023-48786.md): A server-side request forgery vulnerability \[CWE-918\] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an a (CVSS 4.1, Fortinet FortiClientEMS)
- [CVE-2025-24471](https://cve.now/CVE-2025-24471.md): An Improper Certificate Validation vulnerability \[CWE-295\] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP veri (CVSS 6.0, Fortinet FortiOS)
- [CVE-2025-22254](https://cve.now/CVE-2025-22254.md): An Improper Privilege Management vulnerability \[CWE-269\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, (CVSS 6.5, Fortinet FortiOS · Fortinet FortiProxy +1)
- [CVE-2025-22256](https://cve.now/CVE-2025-22256.md): A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1 (CVSS 6.0, Fortinet FortiPAM · Fortinet FortiSRA)
- [CVE-2024-32119](https://cve.now/CVE-2024-32119.md): An improper authentication vulnerability \[CWE-287\] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attac (CVSS 4.6, Fortinet FortiClientEMS)
- [CVE-2025-31104](https://cve.now/CVE-2025-31104.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 throug (CVSS 7.0, Fortinet FortiADC)
- [CVE-2025-22251](https://cve.now/CVE-2025-22251.md): An improper restriction of communication channel to intended endpoints vulnerability \[CWE-923\] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 al (CVSS 3.0, Fortinet FortiOS)
- [CVE-2024-50562](https://cve.now/CVE-2024-50562.md): An Insufficient Session Expiration vulnerability \[CWE-613\] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and bel (CVSS 4.4, Fortinet FortiOS · Fortinet FortiPAM +1)
- [CVE-2024-54019](https://cve.now/CVE-2024-54019.md): A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 (CVSS 4.4, Fortinet FortiClientWindows)
- [CVE-2024-45329](https://cve.now/CVE-2024-45329.md): A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 (CVSS 3.9, Fortinet FortiPortal)
- [CVE-2025-5969](https://cve.now/CVE-2025-5969.md): D-Link DIR-632 HTTP POST Request biurl\_grou FUN\_00425fd8 stack-based overflow (CVSS 8.7, D-Link DIR-632)
- [CVE-2025-33112](https://cve.now/CVE-2025-33112.md): IBM AIX command execution (CVSS 8.4, IBM AIX · IBM VIOS)
- [CVE-2025-47108](https://cve.now/CVE-2025-47108.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2025-30321](https://cve.now/CVE-2025-30321.md): InDesign Desktop | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2025-43589](https://cve.now/CVE-2025-43589.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-30317](https://cve.now/CVE-2025-30317.md): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-43558](https://cve.now/CVE-2025-43558.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-47105](https://cve.now/CVE-2025-47105.md): InDesign Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2025-47104](https://cve.now/CVE-2025-47104.md): InDesign Desktop | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2025-43593](https://cve.now/CVE-2025-43593.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2025-47106](https://cve.now/CVE-2025-47106.md): InDesign Desktop | Use After Free (CWE-416) (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2025-43590](https://cve.now/CVE-2025-43590.md): InDesign Desktop | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2023-20599](https://cve.now/CVE-2023-20599.md): Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) re (CVSS 7.9, AMD EPYC™ 7002 Series Processors · AMD Ryzen™ Threadripp… +8)
- [CVE-2025-27206](https://cve.now/CVE-2025-27206.md): Adobe Commerce | Improper Access Control (CWE-284) (CVSS 5.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-43586](https://cve.now/CVE-2025-43586.md): Adobe Commerce | Improper Access Control (CWE-284) (CVSS 8.1, Adobe Commerce)
- [CVE-2025-47110](https://cve.now/CVE-2025-47110.md): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.4, Adobe Commerce · magento/community-edition)
- [CVE-2025-27207](https://cve.now/CVE-2025-27207.md): Adobe Commerce | Improper Access Control (CWE-284) (CVSS 6.5, Adobe Commerce)
- [CVE-2025-43585](https://cve.now/CVE-2025-43585.md): Adobe Commerce | Improper Authorization (CWE-285) (CVSS 8.2, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-4678](https://cve.now/CVE-2025-4678.md): Remote Code Execution leads to Command Injection (CVSS 7.0, Pandora FMS Pandora ITSM)
- [CVE-2025-4653](https://cve.now/CVE-2025-4653.md): Remote Code Execution leads to Command Injection (CVSS 7.0, Pandora FMS Pandora ITSM)
- [CVE-2025-49143](https://cve.now/CVE-2025-49143.md): Nautobot may allows uploaded media files to be accessible without authentication (CVSS 6.3, nautobot)
- [CVE-2025-49142](https://cve.now/CVE-2025-49142.md): Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating (CVSS 6.0, nautobot)
- [CVE-2025-48937](https://cve.now/CVE-2025-48937.md): matrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator (CVSS 4.9, matrix-org matrix-rust-sdk · matrix-sdk-crypto)
- [CVE-2025-48879](https://cve.now/CVE-2025-48879.md): OctoPrint Vulnerable to Denial of Service through malformed HTTP request (CVSS 6.5, OctoPrint)
- [CVE-2025-48067](https://cve.now/CVE-2025-48067.md): OctoPrint vulnerable to possible file extraction via upload endpoints (CVSS 5.4, OctoPrint)
- [CVE-2025-40591](https://cve.now/CVE-2025-40591.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.5), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.5), RUGGE (CVSS 7.7, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2025-40585](https://cve.now/CVE-2025-40585.md): A vulnerability has been identified in Energy Services (All versions with G5DFR). (CVSS 9.9, Siemens Energy Services)
- [CVE-2025-40569](https://cve.now/CVE-2025-40569.md): A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions \< V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All v (CVSS 4.8, Siemens RUGGEDCOM RST2428P · Siemens SCALANCE XCH328 +5)
- [CVE-2025-40568](https://cve.now/CVE-2025-40568.md): A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions \< V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All v (CVSS 4.3, Siemens RUGGEDCOM RST2428P · Siemens SCALANCE XCH328 +5)
- [CVE-2025-40567](https://cve.now/CVE-2025-40567.md): A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions \< V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All v (CVSS 6.5, Siemens RUGGEDCOM RST2428P · Siemens SCALANCE XCH328 +5)
- [CVE-2024-41797](https://cve.now/CVE-2024-41797.md): A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions \< V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All (CVSS 4.3, Siemens RUGGEDCOM RST2428P · Siemens SCALANCE XC316-8 +17)
- [CVE-2025-30220](https://cve.now/CVE-2025-30220.md): GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling (CVSS 9.9, geoserver · org.geoserver.web:gs-web-app +1)
- [CVE-2025-37100](https://cve.now/CVE-2025-37100.md): Exposure of Sensitive Information to an Unauthorized User in HPE Aruba Networking Private 5G Core (CVSS 7.7, Hewlett Packard Enterprise (HPE) HPE Aruba Networking Priva…)
- [CVE-2025-30145](https://cve.now/CVE-2025-30145.md): GeoServer has an Infinite Loop Vulnerability in Jiffle process (CVSS 7.5, geoserver · org.geoserver.web:gs-web-app +2)
- [CVE-2025-27505](https://cve.now/CVE-2025-27505.md): GeoServer Missing Authorization on REST API Index (CVSS 5.3, geoserver · org.geoserver.web:gs-web-app +1)
- [CVE-2025-5335](https://cve.now/CVE-2025-5335.md): Privilege Ecalation due to Untrusted Search Path Vulnerability (CVSS 7.8, Autodesk Installer)
- [CVE-2024-40625](https://cve.now/CVE-2024-40625.md): GeoServer Coverage REST API Allows Server Side Request Forgery (CVSS 5.5, geoserver · org.geoserver:gs-rest +1)
- [CVE-2024-38524](https://cve.now/CVE-2024-38524.md): GWC Home Page communicate version and revision information (CVSS 5.3, geoserver · org.geoserver.web:gs-web-app +1)
- [CVE-2025-26395](https://cve.now/CVE-2025-26395.md): SolarWinds SWOSH DOM-based reflective XSS Vulnerability (CVSS 7.1, SolarWinds Observability Self-Hosted)
- [CVE-2025-26394](https://cve.now/CVE-2025-26394.md): SolarWinds SWOSH Open Redirection Vulnerability (CVSS 4.8, SolarWinds Observability Self-Hosted)
- [CVE-2025-5353](https://cve.now/CVE-2025-5353.md): A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credential (CVSS 8.8, Ivanti Workspace Control)
- [CVE-2025-22463](https://cve.now/CVE-2025-22463.md): A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environmen (CVSS 7.3, Ivanti Workspace Control)
- [CVE-2025-22455](https://cve.now/CVE-2025-22455.md): A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials (CVSS 8.8, Ivanti Workspace Control)
- [CVE-2024-34711](https://cve.now/CVE-2024-34711.md): GeoServer has improper ENTITY\_RESOLUTION\_ALLOWLIST URI validation in XML Processing (SSRF) (CVSS 9.3, geoserver · org.geoserver.web:gs-web-app +1)
- [CVE-2024-29198](https://cve.now/CVE-2024-29198.md): GeoServer Vulnerable to Unauthenticated SSRF via TestWfsPost (CVSS 7.5, geoserver · org.geoserver:gs-wfs +1)
- [CVE-2025-49454](https://cve.now/CVE-2025-49454.md): WordPress TinySalt theme \< 3.10.0 - Local File Inclusion vulnerability (CVSS 8.1, LoftOcean TinySalt)
- [CVE-2025-49455](https://cve.now/CVE-2025-49455.md): WordPress WordPress-WPJobBoard \<= 25.07010000-WP6.8.1-JB5.11.5 - SQL Injection Vulnerability (CVSS 9.3, ClickandPledge WordPress-WPJobBoard)
- [CVE-2025-49507](https://cve.now/CVE-2025-49507.md): WordPress CozyStay theme \< 1.7.1 - PHP Object Injection vulnerability (CVSS 9.8, LoftOcean CozyStay)
- [CVE-2025-49509](https://cve.now/CVE-2025-49509.md): WordPress Audio Editor & Recorder plugin \<= 2.2.1 - Broken Access Control vulnerability (CVSS 5.3, Roland Beaussant Audio Editor & Recorder)
- [CVE-2025-49510](https://cve.now/CVE-2025-49510.md): WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin \<= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, WPFactory Min Max Step Quantity Limits Manager for WooComme…)
- [CVE-2025-49511](https://cve.now/CVE-2025-49511.md): WordPress Civi Framework plugin \<= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability (CVSS 7.1, uxper Civi Framework)
- [CVE-2025-43699](https://cve.now/CVE-2025-43699.md): Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission chec (CVSS 5.3, Salesforce OmniStudio)
- [CVE-2025-43698](https://cve.now/CVE-2025-43698.md): Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for S (CVSS 9.1, Salesforce OmniStudio)
- [CVE-2025-43697](https://cve.now/CVE-2025-43697.md): Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. (CVSS 7.5, Salesforce OmniStudio)
- [CVE-2025-4577](https://cve.now/CVE-2025-4577.md): Smash Balloon Custom Facebook Feed \<= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`data-color\` Attribute (CVSS 6.4, smub Smash Balloon Social Post Feed – Simple Social Feeds f…)
- [CVE-2025-2918](https://cve.now/CVE-2025-2918.md): Ultimate Blocks – WordPress Blocks Plugin \<= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for B…)
- [CVE-2025-4774](https://cve.now/CVE-2025-4774.md): Premium Addons for Elementor \<= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget (CVSS 6.4, leap13 Premium Addons for Elementor – Powerful Elementor Te…)
- [CVE-2025-43701](https://cve.now/CVE-2025-43701.md): Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data. (CVSS 7.5, Salesforce OmniStudio)
- [CVE-2025-43700](https://cve.now/CVE-2025-43700.md): Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data. (CVSS 7.5, Salesforce OmniStudio)
- [CVE-2025-41657](https://cve.now/CVE-2025-41657.md): AUMA: Incorrect delivery status of the Bluetooth configuration (CVSS 4.3, Auma AC1.2 · Auma PROFOX)
- [CVE-2024-13090](https://cve.now/CVE-2024-13090.md): Privilege escalation in Guardian/CMC before 24.6.0 (CVSS 7.3, Nozomi Networks Guardian · Nozomi Networks CMC)
- [CVE-2024-13089](https://cve.now/CVE-2024-13089.md): Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 (CVSS 7.5, Nozomi Networks Guardian · Nozomi Networks CMC)
- [CVE-2025-40662](https://cve.now/CVE-2025-40662.md): Absolute path disclosure vulnerability in DM Corporative CMS (CVSS 6.9, Dmacroweb DM Corporative CMS)
- [CVE-2025-40661](https://cve.now/CVE-2025-40661.md): Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS (CVSS 6.9, Dmacroweb DM Corporative CMS)
- [CVE-2025-40660](https://cve.now/CVE-2025-40660.md): Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS (CVSS 6.9, Dmacroweb DM Corporative CMS)
- [CVE-2025-40659](https://cve.now/CVE-2025-40659.md): Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS (CVSS 6.9, Dmacroweb DM Corporative CMS)
- [CVE-2025-40658](https://cve.now/CVE-2025-40658.md): Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS (CVSS 6.9, Dmacroweb DM Corporative CMS)
- [CVE-2025-40657](https://cve.now/CVE-2025-40657.md): SQL injection vulnerability in DM Corporative CMS (CVSS 9.3, Dmacroweb DM Corporative CMS)
- [CVE-2025-40656](https://cve.now/CVE-2025-40656.md): SQL injection vulnerability in DM Corporative CMS (CVSS 9.3, Dmacroweb DM Corporative CMS)
- [CVE-2025-40655](https://cve.now/CVE-2025-40655.md): SQL injection vulnerability in DM Corporative CMS (CVSS 9.3, Dmacroweb DM Corporative CMS)
- [CVE-2025-40654](https://cve.now/CVE-2025-40654.md): SQL injection vulnerability in DM Corporative CMS (CVSS 9.3, Dmacroweb DM Corporative CMS)
- [CVE-2025-4681](https://cve.now/CVE-2025-4681.md): Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affect (CVSS 8.6, upKeeper Solutions upKeeper Instant Privilege Access)
- [CVE-2025-3117](https://cve.now/CVE-2025-3117.md): CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration fi (CVSS 5.1, Schneider Electric Modicon Controllers M241/M251 · Schneide…)
- [CVE-2025-4680](https://cve.now/CVE-2025-4680.md): Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Acc (CVSS 8.6, upKeeper Solutions upKeeper Instant Privilege Access)
- [CVE-2025-3116](https://cve.now/CVE-2025-3116.md): CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special (CVSS 7.1, Schneider Electric Modicon Controllers M241/M251 · Schneide…)
- [CVE-2025-3905](https://cve.now/CVE-2025-3905.md): CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system varia (CVSS 5.1, Schneider Electric Modicon Controllers M241/M251 · Schneide…)
- [CVE-2025-3112](https://cve.now/CVE-2025-3112.md): CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user send (CVSS 7.1, Schneider Electric Modicon Controllers M241/M251)
- [CVE-2025-3899](https://cve.now/CVE-2025-3899.md): CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on We (CVSS 5.1, Schneider Electric Modicon Controllers M241/M251)
- [CVE-2025-3898](https://cve.now/CVE-2025-3898.md): CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS r (CVSS 7.1, Schneider Electric Modicon Controllers M241/M251 · Schneide…)
- [CVE-2025-5743](https://cve.now/CVE-2025-5743.md): CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause rem (CVSS 7.0, Schneider Electric EVLink WallBox)
- [CVE-2025-5742](https://cve.now/CVE-2025-5742.md): CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user (CVSS 5.1, Schneider Electric EVLink WallBox)
- [CVE-2025-5741](https://cve.now/CVE-2025-5741.md): CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file (CVSS 6.9, Schneider Electric EVLink WallBox)
- [CVE-2025-5740](https://cve.now/CVE-2025-5740.md): CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file (CVSS 8.6, Schneider Electric EVLink WallBox)
- [CVE-2025-27817](https://cve.now/CVE-2025-27817.md): Apache Kafka Client: Arbitrary file read and SSRF vulnerability (CVSS 7.5, Apache Software Foundation Apache Kafka Client · org.apache…)
- [CVE-2025-27819](https://cve.now/CVE-2025-27819.md): Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration (CVSS 7.5, Apache Software Foundation Apache Kafka · org.apache.kaf… +7)
- [CVE-2025-27818](https://cve.now/CVE-2025-27818.md): Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration (CVSS 8.8, Apache Software Foundation Apache Kafka · org.apache.kaf… +2)
- [CVE-2025-1041](https://cve.now/CVE-2025-1041.md): Avaya Call Management System RCE vulnerability (CVSS 9.9, Avaya Call Management System)
- [CVE-2025-4954](https://cve.now/CVE-2025-4954.md): Axle Demo Importer \<= 1.0.3 - Author+ Arbitrary File Upload (CVSS 8.8, Axle Demo Importer)
- [CVE-2025-4840](https://cve.now/CVE-2025-4840.md): Likes and Dislikes Plugin \<= 1.0.0 - Unauthenticated SQL Injection (CVSS 7.5, inprosysmedia-likes-dislikes-post)
- [CVE-2025-5952](https://cve.now/CVE-2025-5952.md): Zend.To NSSDropoff.php exec os command injection (CVSS 6.9, Zend.To)
- [CVE-2025-5935](https://cve.now/CVE-2025-5935.md): Open5GS AMF/MME emm-sm.c common\_register\_state denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-3076](https://cve.now/CVE-2025-3076.md): Elementor Pro \<= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, https://elementor.com/ Elementor Website Builder Pro)
- [CVE-2025-4601](https://cve.now/CVE-2025-4601.md): RH - Real Estate WordPress Theme \<= 4.4.0 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, InspiryThemes RH - Real Estate WordPress Theme)
- [CVE-2025-4387](https://cve.now/CVE-2025-4387.md): Abandoned Cart Pro for WooCommerce \<= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, Tyche Softwares Abandoned Cart Pro for WooCommerce)
- [CVE-2025-5925](https://cve.now/CVE-2025-5925.md): Bunny’s Print CSS \<= 0.95 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, steph Bunny’s Print CSS)
- [CVE-2025-5934](https://cve.now/CVE-2025-5934.md): Netgear EX3700 mtd sub\_41619C stack-based overflow (CVSS 8.7, Netgear EX3700)
- [CVE-2025-5913](https://cve.now/CVE-2025-5913.md): PHPGurukul Vehicle Record Management System search-vehicle.php sql injection (CVSS 6.9, PHPGurukul Vehicle Record Management System)
- [CVE-2025-5912](https://cve.now/CVE-2025-5912.md): D-Link DIR-632 HTTP POST Request do\_file stack-based overflow (CVSS 8.7, D-Link DIR-632)
- [CVE-2025-5911](https://cve.now/CVE-2025-5911.md): TOTOLINK EX1200T HTTP POST Request formDMZ buffer overflow (CVSS 8.7, TOTOLINK EX1200T)
- [CVE-2025-5910](https://cve.now/CVE-2025-5910.md): TOTOLINK EX1200T HTTP POST Request formWsc buffer overflow (CVSS 8.7, TOTOLINK EX1200T)
- [CVE-2025-5909](https://cve.now/CVE-2025-5909.md): TOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflow (CVSS 8.7, TOTOLINK EX1200T)
- [CVE-2025-5908](https://cve.now/CVE-2025-5908.md): TOTOLINK EX1200T HTTP POST Request formIpQoS buffer overflow (CVSS 8.7, TOTOLINK EX1200T)
- [CVE-2025-5907](https://cve.now/CVE-2025-5907.md): TOTOLINK EX1200T HTTP POST Request formFilter buffer overflow (CVSS 8.7, TOTOLINK EX1200T)
- [CVE-2025-5906](https://cve.now/CVE-2025-5906.md): code-projects Laundry System data missing authentication (CVSS 6.9, code-projects Laundry System)
- [CVE-2025-42998](https://cve.now/CVE-2025-42998.md): Security misconfiguration vulnerability in SAP Business One Integration Framework (CVSS 5.3, SAP\_SE SAP Business One Integration Framework)
- [CVE-2025-42996](https://cve.now/CVE-2025-42996.md): Multiple vulnerabilities in SAP MDM Server (CVSS 5.6, SAP\_SE SAP MDM Server)
- [CVE-2025-42995](https://cve.now/CVE-2025-42995.md): Multiple vulnerabilities in SAP MDM Server (CVSS 7.5, SAP\_SE SAP MDM Server)
- [CVE-2025-42994](https://cve.now/CVE-2025-42994.md): Multiple vulnerabilities in SAP MDM Server (CVSS 7.5, SAP\_SE SAP MDM Server)
- [CVE-2025-42993](https://cve.now/CVE-2025-42993.md): Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) (CVSS 6.7, SAP\_SE SAP S/4HANA)
- [CVE-2025-42991](https://cve.now/CVE-2025-42991.md): Missing Authorization check in SAP S/4HANA (Bank Account Application) (CVSS 4.3, SAP\_SE SAP S/4HANA)
- [CVE-2025-42990](https://cve.now/CVE-2025-42990.md): HTML Injection in Unprotected SAPUI5 applications (CVSS 3.0, SAP\_SE SAPUI5 applications)
- [CVE-2025-42989](https://cve.now/CVE-2025-42989.md): Missing Authorization check in SAP NetWeaver Application Server for ABAP (CVSS 9.6, SAP\_SE SAP NetWeaver Application Server for ABAP)
- [CVE-2025-42988](https://cve.now/CVE-2025-42988.md): Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform (CVSS 3.7, SAP\_SE SAP Business Objects Business Intelligence Platform)
- [CVE-2025-42987](https://cve.now/CVE-2025-42987.md): Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement) (CVSS 4.3, SAP\_SE SAP S/4HANA)
- [CVE-2025-42984](https://cve.now/CVE-2025-42984.md): Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application) (CVSS 5.4, SAP\_SE SAP S/4HANA)
- [CVE-2025-42983](https://cve.now/CVE-2025-42983.md): Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis (CVSS 8.5, SAP\_SE SAP Business Warehouse and SAP Plug-In Basis)
- [CVE-2025-42982](https://cve.now/CVE-2025-42982.md): Information Disclosure in SAP GRC (AC Plugin) (CVSS 8.8, SAP\_SE SAP GRC)
- [CVE-2025-42977](https://cve.now/CVE-2025-42977.md): Directory Traversal vulnerability in SAP NetWeaver Visual Composer (CVSS 7.6, SAP\_SE SAP NetWeaver Visual Composer)
- [CVE-2025-31325](https://cve.now/CVE-2025-31325.md): Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation) (CVSS 5.8, SAP\_SE SAP NetWeaver)
- [CVE-2025-23192](https://cve.now/CVE-2025-23192.md): Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) (CVSS 8.2, SAP\_SE SAP BusinessObjects Business Intelligence)
- [CVE-2025-5905](https://cve.now/CVE-2025-5905.md): TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow (CVSS 8.7, TOTOLINK T10)
- [CVE-2025-5904](https://cve.now/CVE-2025-5904.md): TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow (CVSS 8.7, TOTOLINK T10)
- [CVE-2024-37394](https://cve.now/CVE-2024-37394.md): A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users to execute arbitrary (CVSS 5.4)
- [CVE-2024-37395](https://cve.now/CVE-2024-37395.md): A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbit (CVSS 5.4)
- [CVE-2024-37396](https://cve.now/CVE-2024-37396.md): A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users to execute arbitrary (CVSS 5.4)
- [CVE-2024-41502](https://cve.now/CVE-2024-41502.md): Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the form field "Observaces" (observances) in the " (CVSS 6.1)
- [CVE-2024-41503](https://cve.now/CVE-2024-41503.md): Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field "Ttulo" (title) inside the filter Save op (CVSS 6.1)
- [CVE-2024-41504](https://cve.now/CVE-2024-41504.md): Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2024-41505](https://cve.now/CVE-2024-41505.md): Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the "Pessoas" (persons) section via the field "Prof (CVSS 6.1)
- [CVE-2024-57186](https://cve.now/CVE-2024-57186.md): In Erxes \<1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file (CVSS 5.4, erxes)
- [CVE-2024-57189](https://cve.now/CVE-2024-57189.md): In Erxes \<1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHist (CVSS 5.4, erxes)
- [CVE-2024-57190](https://cve.now/CVE-2024-57190.md): Erxes \<1.6.1 is vulnerable to Incorrect Access Control. (CVSS 9.8, erxes)
- [CVE-2025-44043](https://cve.now/CVE-2025-44043.md): Keyoti SearchUnit prior to 9.0.0. (CVSS 5.4)
- [CVE-2025-44044](https://cve.now/CVE-2025-44044.md): Keyoti SearchUnit prior to 9.0.0. (CVSS 7.5)
- [CVE-2025-46612](https://cve.now/CVE-2025-46612.md): The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/wor (CVSS 7.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-06-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.