5.4

CVSS3.1

CVE-2025-64566 - Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged attacker to execute malicious scripts in the context of the victim's browser. Exploitation of this issue requires user interaction, s…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 7:55 p.m.

5.4

CVSS3.1

CVE-2025-64604 - Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 5:40 p.m.

5.4

CVSS3.1

CVE-2025-64599 - Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 5:43 p.m.

5.4

CVSS3.1

CVE-2025-64804 - Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 6:11 p.m.

5.4

CVSS3.1

CVE-2025-64623 - Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 5:28 p.m.

5.4

CVSS3.1

CVE-2025-64858 - Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 5:33 p.m.

5.4

CVSS3.1

CVE-2025-64847 - Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 6:08 p.m.

5.4

CVSS3.1

CVE-2025-64607 - Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 5:42 p.m.

5.4

CVSS3.1

CVE-2025-64803 - Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: Dec. 12, 2025, 6:14 p.m.

7

CVSS4.0

CVE-2025-34429 - 1Panel CSRF Web Port Configuration Change

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The port-change endpoint lacks CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a port-c…

📅 Published: Dec. 10, 2025, 6:23 p.m. 🔄 Last Modified: March 5, 2026, 12:04 p.m.
Total resulsts: 349182
Page 2682 of 34,919
« previous page » next page
Filters