Medium - CVE-2025-21126 - InDesign Desktop versions ID20.0, ID19.5.1 and...
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could...
High - CVE-2025-21157 - InDesign Desktop versions ID20.0, ID19.5.1 and...
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user....
High - CVE-2025-21158 - InDesign Desktop versions ID20.0, ID19.5.1 and...
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the...
NA - CVE-2025-22399 - Dell UCC Edge, version 2.3.0, contains a Blind...
Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to...
NA - CVE-2025-24470 - An Improper Resolution of Path Equivalence...
An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to...
NA - CVE-2025-24472 - An Authentication Bypass Using an Alternate...
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a...
NA - CVE-2019-15002 - An exploitable CSRF vulnerability exists in...
An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker can log a user into the system under...
Medium - CVE-2025-21155 - Substance3D - Stager versions 3.1.0 and earlier...
Substance3D - Stager versions 3.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this...
High - CVE-2025-21156 - InCopy versions 20.0, 19.5.1 and earlier are...
InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user....
High - CVE-2025-21159 - Illustrator versions 29.1, 28.7.3 and earlier...
Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...