Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Open the advisoryNov 11, 2025
- High7.8Substance3D - Stager versions 3.1.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution i…Open the advisoryNov 11, 2025
- High7.8Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Open the advisoryNov 11, 2025
- High7.8Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the…Open the advisoryNov 11, 2025
- Medium5.5Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Open the advisoryNov 11, 2025
- Medium5.5Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Open the advisoryNov 11, 2025
- Medium5.5Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Open the advisoryNov 11, 2025
- Medium5.5Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory exposure.Open the advisoryNov 11, 2025
- Medium5.5Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Open the advisoryNov 11, 2025
- Medium5.5Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure.Open the advisoryNov 11, 2025
- High7.8Format Plugins versions 1.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of…Open the advisoryNov 11, 2025
- High7.8Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th…Open the advisoryNov 11, 2025
- High7.8Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of th…Open the advisoryNov 11, 2025
- UnknownAdobe experience_manager XML Injection (aka Blind XPath Injection)Patch nowKEVEPSS 1.76%Oct 28, 2025
- UnknownAdobe experience_manager Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.98%Oct 16, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.31%Sep 9, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 77.46%Aug 12, 2025
- Critical10.0Adobe Experience Manager Forms Code Execution VulnerabilityPatch nowKEVEPSS 88.26%Aug 5, 2025
- UnknownAdobe experience_manager Deserialization of Untrusted DataPatch nowKEVEPSS 51.68%Jul 30, 2025
- Medium5.4Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject mCheck this weekEPSS 27.00%Jul 8, 2025
- Medium5.4Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject mCheck this weekEPSS 27.00%Jul 8, 2025
- Medium5.5Substance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check this weekEPSS 21.00%Jul 8, 2025
- Medium5.5Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check this weekEPSS 28.00%Jul 8, 2025
- Medium5.5Substance3D - Viewer versions 0.22 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check this weekEPSS 25.00%Jul 8, 2025
- Medium5.2ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 1.33%Jul 8, 2025