2026

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10

blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses te

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application de

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denia

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application de

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability t

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in doubl

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-adminis

Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route th

Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack

Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbati

Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthentic

Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing

Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrat

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows a

Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated att

Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict te

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated at

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated us

Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled valu