Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Adobe Connect | CVE-2026-121892 Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue… |
9,9 | 1,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121894 Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL… |
9,9 | 1,05 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121896 Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code.… |
9,9 | 1,05 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121898 Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code.… |
9,9 | 1,05 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121352 Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access to sensitive resources. Exploitation of this issue does not require user interaction. Scope is changed. |
10,0 | 0,89 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121353 Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this… |
10,0 | 1,09 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121354 Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope.… |
9,9 | 1,14 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121355 Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction. |
9,1 | 0,8 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121356 Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed. |
10,0 | 0,89 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager 6.5 | CVE-2026-118482 Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited read and write access. Exploitation of this issue… |
5,4 | 0,47 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Dimension | CVE-2026-118483 Dimension is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a… |
8,2 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Content Credentials Rust SDK / C2PA Tool | CVE-2026-118484 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in… |
6,5 | 1,09 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager 6.5 | CVE-2026-119017 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user… |
9,9 | 1,07 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121349 Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to gain elevated access or… |
9,6 | 1,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121350 Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to disclosure of sensitive memory. A low-privileged attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this… |
7,7 | 0,75 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Connect | CVE-2026-121351 Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope.… |
10,0 | 1,17 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager as a Cloud Service / Adobe Experience Manager 6.5 / Adobe Experience Manager 6.5 LTS | CVE-2026-118197 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in… |
5,4 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager as a Cloud Service / Adobe Experience Manager 6.5 / Adobe Experience Manager 6.5 LTS | CVE-2026-118478 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing… |
5,4 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager 6.5 | CVE-2026-118479 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in… |
5,4 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager 6.5 | CVE-2026-118480 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in… |
5,4 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager 6.5 | CVE-2026-118481 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in… |
5,4 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Content Credentials Rust SDK / C2PA Tool | CVE-2026-113574 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation of this issue does not require user… |
4,0 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager as a Cloud Service / Adobe Experience Manager 6.5 / Adobe Experience Manager 6.5 LTS | CVE-2026-113579 Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of… |
9,9 | 1,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager as a Cloud Service / Adobe Experience Manager 6.5 / Adobe Experience Manager 6.5 LTS | CVE-2026-113580 Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of… |
9,9 | 1,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Adobe Experience Manager as a Cloud Service / Adobe Experience Manager 6.5 / Adobe Experience Manager 6.5 LTS | CVE-2026-114371 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user… |
9,9 | 1,07 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.