Browse CVEs

MEDIUM 5.4 CVE-2024-39418 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result … Commerce after 2.4.3 Fix from $1,6002024-08-14 MEDIUM 6.8 CVE-2024-39406 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Direc… Commerce after 2.4.3 Fix from $1,6002024-08-14 HIGH 8.4 CVE-2024-39401 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an … Commerce after 2.4.3 Fix from $1,9502024-08-14 HIGH 8.4 CVE-2024-39402 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an … Commerce after 2.4.3 Fix from $1,9502024-08-14 HIGH 7.6 CVE-2024-39403 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that cou… Commerce after 2.4.3 Fix from $1,9502024-08-14 CRITICAL 9.0 CVE-2024-39397 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnera… Commerce after 2.4.3 Fix from $2,3002024-08-14 HIGH 8.1 CVE-2024-39400 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This… Commerce after 2.4.3 Fix from $1,9502024-08-14 HIGH 7.7 CVE-2024-39399 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Direc… Commerce after 2.4.3 Fix from $1,9502024-08-14 HIGH 7.4 CVE-2024-39398 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Restriction of Excessive Authentication Attemp… Commerce after 2.4.3 Fix from $1,9502024-08-14 HIGH 7.8 CVE-2024-41864 Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… Substance 3d Designer 14.0+ Fix from $1,9502024-08-14 MEDIUM 5.5 CVE-2024-41861 Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.… Substance 3d Sampler 4.5.1+ Fix from $1,6002024-08-14 MEDIUM 5.5 CVE-2024-41862 Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.… Substance 3d Sampler 4.5.1+ Fix from $1,6002024-08-14 MEDIUM 5.5 CVE-2024-41863 Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.… Substance 3d Sampler 4.5.1+ Fix from $1,6002024-08-14 HIGH 7.8 CVE-2024-41858 InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code executio… Incopy 19.4+ Fix from $1,9502024-08-14 MEDIUM 5.5 CVE-2024-41860 Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.… Substance 3d Sampler 4.5.1+ Fix from $1,6002024-08-14 MEDIUM 5.5 CVE-2024-39396 InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… Indesign 18.5.3 / 19.4+ Fix from $1,6002024-08-02 HIGH 7.8 CVE-2024-39392 InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… Indesign 18.5.3 / 19.4+ Fix from $1,9502024-08-02 MEDIUM 5.5 CVE-2024-39379 Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive me… Acrobat after 126.0.2592.81 Fix from $1,6002024-07-31 MEDIUM 5.5 CVE-2024-41836 InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application den… Indesign 18.5.3 / 19.4+ Fix from $1,6002024-07-23 MEDIUM 5.4 CVE-2024-34128 Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-… Experience Manager 6.5.21.0+ Fix from $1,6002024-07-23 HIGH 7.8 CVE-2024-34139 Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code … Bridge 13.0.8 / 14.1.1+ Fix from $1,9502024-07-09 MEDIUM 5.5 CVE-2024-34140 Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… Bridge 14.0.4+ Fix from $1,6002024-07-09 HIGH 7.8 CVE-2024-20781 InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… Indesign 18.5.3 / 19.4+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-20782 InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execu… Indesign 18.5.3 / 19.4+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-20783 InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… Indesign 18.5.3 / 19.4+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-20785 InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… Indesign 18.5.3 / 19.4+ Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-34123 Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. … Premiere Pro 23.6.7 / 24.5+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-34122 Acrobat for Edge versions 126.0.2592.68 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could resu… Acrobat Patch available Fix from $1,9502024-07-02 MEDIUM 5.4 CVE-2024-34142 Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-… Experience Manager 6.5.21.0 / 2024.5.0+ Fix from $1,6002024-06-25 MEDIUM 5.4 CVE-2024-34141 Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-… Experience Manager 6.5.21.0 / 2024.5.0+ Fix from $1,6002024-06-25