Filtered by vendor Adobe
Subscribe
Total
4695 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2012-2024 | 1 Adobe | 2 Illustrator, Illustrator Cs5.5 | 2017-08-28 | 10.0 HIGH | N/A |
Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2025, and CVE-2012-2026. | |||||
CVE-2012-2048 | 1 Adobe | 1 Coldfusion | 2017-08-28 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors. | |||||
CVE-2012-0275 | 1 Adobe | 2 Photoshop Cs5.5, Photoshop Cs6 | 2017-08-28 | 10.0 HIGH | N/A |
Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression. | |||||
CVE-2011-2091 | 1 Adobe | 1 Coldfusion | 2017-08-28 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors. | |||||
CVE-2011-2093 | 1 Adobe | 3 Blazeds, Livecycle, Livecycle Data Services | 2017-08-28 | 5.0 MEDIUM | N/A |
Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a "complex object graph vulnerability." | |||||
CVE-2011-2108 | 1 Adobe | 1 Shockwave Player | 2017-08-28 | 9.3 HIGH | N/A |
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a "design flaw." | |||||
CVE-2011-2124 | 1 Adobe | 1 Shockwave Player | 2017-08-28 | 9.3 HIGH | N/A |
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2127, and CVE-2011-2128. | |||||
CVE-2011-2125 | 1 Adobe | 1 Shockwave Player | 2017-08-28 | 9.3 HIGH | N/A |
Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors. | |||||
CVE-2011-2126 | 1 Adobe | 1 Shockwave Player | 2017-08-28 | 9.3 HIGH | N/A |
Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors. | |||||
CVE-2011-2127 | 1 Adobe | 1 Shockwave Player | 2017-08-28 | 9.3 HIGH | N/A |
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2128. | |||||
CVE-2011-2128 | 1 Adobe | 1 Shockwave Player | 2017-08-28 | 9.3 HIGH | N/A |
Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2127. | |||||
CVE-2011-2423 | 1 Adobe | 1 Shockwave Player | 2017-08-28 | 10.0 HIGH | N/A |
msvcr90.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. | |||||
CVE-2010-5213 | 1 Adobe | 1 Livecycle Designer | 2017-08-28 | 6.9 MEDIUM | N/A |
Untrusted search path vulnerability in Adobe LiveCycle Designer 8.2.1.3144.1.471865 allows local users to gain privileges via a Trojan horse .dll file in the current working directory, as demonstrated by a directory that contains a .tds file. NOTE: some of these details are obtained from third party information. | |||||
CVE-2010-5290 | 1 Adobe | 1 Coldfusion | 2017-08-28 | 10.0 HIGH | N/A |
The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861. | |||||
CVE-2011-0580 | 1 Adobe | 1 Coldfusion | 2017-08-16 | 4.3 MEDIUM | N/A |
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |||||
CVE-2011-0581 | 1 Adobe | 1 Coldfusion | 2017-08-16 | 4.3 MEDIUM | N/A |
Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags. | |||||
CVE-2011-0582 | 1 Adobe | 1 Coldfusion | 2017-08-16 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain sensitive information via unknown vectors. | |||||
CVE-2011-0583 | 1 Adobe | 1 Coldfusion | 2017-08-16 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via the cfform tag. | |||||
CVE-2011-0584 | 1 Adobe | 1 Coldfusion | 2017-08-16 | 4.3 MEDIUM | N/A |
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors. | |||||
CVE-2011-0629 | 1 Adobe | 1 Coldfusion | 2017-08-16 | 6.8 MEDIUM | N/A |
Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. |