CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction – the victim must visit a crafted webpage. Scope is changed.
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction – the victim must visit a crafted webpage. Scope is changed.
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction – the victim must visit a crafted webpage. Scope is changed.
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may execute in the victim's browser when they browse the page containing the vulnerable field. Scope is changed.
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker can manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction – the victim must visit a crafted webpage. Scope is changed.
Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application. Exploitation requires user interaction, as a victim must open a malicious file.
Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction, as a victim must open a malicious file.
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application. Exploitation requires user interaction, as a victim must open a malicious file.
Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction, as a victim must open a malicious file.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

