Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of February 10, 2025

A vulnerability in ABB's System 800xA allows an attacker to stop or manipulate video feeds, affecting versions 5.1.X, 6.0.3.X, 6.1.1.X, and 6.2.X. AcyMailing SMTP Newsletter is vulnerable to Reflected XSS, affecting all versions. Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, and 2.4.4-p11 are affected by multiple vulnerabilities, including Improper Authorization, stored XSS, and Improper Access Control. These vulnerabilities can lead to privilege escalation, security feature bypass, and session takeover. Adobe Commerce is also affected by an Improper Limitation of a Pathname to Restricted Directory vulnerability, which can lead to a security feature bypass. Adobe Illustrator versions 29.1, 28.7.3, and earlier are affected by Use After Free, Integer Underflow, and Stack-based Buffer Overflow vulnerabilities, which can result in arbitrary code execution. Adobe InCopy and InDesign Desktop are also affected by multiple vulnerabilities, including out-of-bounds write, Heap-based Buffer Overflow, and Integer Underflow vulnerabilities, which can result in arbitrary code execution. Adobe Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability, which can result in arbitrary code execution. advplyr's audiobookshelf is affected by an authentication bypass vulnerability, which can lead to information disclosure and denial of service.