VYPR
← Adobe Inc.

Vendor CVEs

Adobe Inc.

All CVEs

7,663 total · sorted by risk
  • CVE-2007-1199Mar 2, 2007
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.09

    Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with <</URI(file:///C:/)/S/URI>>, a different issue than CVE-2007-0045.

  • CVE-2007-0817Feb 7, 2007
    Adobe Inc.
    Coldfusion
    risk 0.04cvss —epss 0.08

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.

  • CVE-2007-0103Jan 9, 2007
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.15

    The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog…

  • CVE-2007-0045Jan 3, 2007
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.47

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome,…

  • CVE-2006-1786Apr 13, 2006
    Adobe Inc.
    Document Server
    risk 0.04cvss —epss 0.12

    Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via (1) the actionID parameter in ads-readerext and (2) the op parameter in AlterCast. NOTE: it is not clear whether the…

  • CVE-2004-0194Mar 29, 2004
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.11

    Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data.

  • CVE-2003-0508Aug 7, 2003
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.07

    Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a long mailto link.

  • CVE-1999-1576Sep 27, 1999
    Adobe Inc.
    Acrobat
    risk 0.04cvss —epss 0.13

    Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method.

  • CVE-2026-48319CriJul 14, 2026
    Adobe Inc.
    Coldfusion
    risk 0.03cvss 9.1epss 0.32

    ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to…

  • CVE-2012-1525Aug 15, 2012
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.32

    Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

  • CVE-2011-0600Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.40

    The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and…

  • CVE-2011-0567Feb 10, 2011
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.40

    AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image that triggers an incorrect pointer…

  • CVE-2009-1873Aug 18, 2009
    Adobe Inc.
    Jrun
    risk 0.03cvss —epss 0.05

    Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the logfile parameter.

  • CVE-2009-2564Jul 21, 2009
    NOS Microsystems
    getPlus Download Manager
    risk 0.03cvss —epss 0.06

    NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\bin\getPlus_HelperSvc.exe with insecure permissions (Everyone:Full Control), which…

  • CVE-2009-0541Feb 25, 2009
    Magento
    Magento
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username field in an admin/ request to index.php, possibly related to the login[username] parameter and the…

  • CVE-2007-1280May 10, 2007
    Adobe Inc.
    Robohelp
    risk 0.03cvss —epss 0.06

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving…

  • CVE-2007-0048Jan 3, 2007
    Adobe Inc.
    Acrobat
    risk 0.03cvss —epss 0.33

    Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory…

  • CVE-2005-1843Aug 24, 2005
    Adobe Inc.
    Version Cue
    risk 0.03cvss —epss 0.01

    VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument.

  • CVE-2005-1842Aug 24, 2005
    Adobe Inc.
    Version Cue
    risk 0.03cvss —epss 0.01

    VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack.

  • CVE-2005-1307May 17, 2005
    Apple Inc.
    Mac OS X
    risk 0.03cvss —epss 0.04

    The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled…

  • CVE-2002-1016Oct 4, 2002
    Adobe Inc.
    eBook Reader
    risk 0.03cvss —epss 0.02

    Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing the operations, and restoring the original data files.

  • CVE-1999-0455Dec 25, 1999
    Adobe Inc.
    Coldfusion
    risk 0.03cvss —epss 0.06

    The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

  • CVE-2026-48318CriJul 14, 2026
    Adobe Inc.
    Coldfusion
    risk 0.02cvss 9.9epss 0.23

    ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended…

  • CVE-2026-48356CriJul 14, 2026
    Adobe Inc.
    Commerce
    risk 0.02cvss 9.3epss 0.28

    Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of…

  • CVE-2026-47992HigJul 14, 2026
    Adobe Inc.
    Commerce
    risk 0.02cvss 7.2epss 0.20

    Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to…

  • CVE-2015-5097Jul 15, 2015
    Adobe Inc.
    Acrobat
    risk 0.02cvss —epss 0.19

    Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary…

  • CVE-2010-2889Oct 6, 2010
    Adobe Inc.
    Acrobat
    risk 0.02cvss —epss 0.27

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-3626.

  • CVE-2008-2641Jun 25, 2008
    Adobe Inc.
    Acrobat
    risk 0.02cvss —epss 0.24

    Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an "input validation issue in a JavaScript…

  • CVE-2008-1201Mar 24, 2008
    Adobe Inc.
    Flash
    risk 0.02cvss —epss 0.20

    Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file.

  • CVE-2007-6242Dec 20, 2007
    Adobe Inc.
    Flashplayer
    risk 0.02cvss —epss 0.30

    Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."

  • CVE-2007-5020Sep 21, 2007
    Adobe Inc.
    Acrobat
    risk 0.02cvss —epss 0.20

    Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on Windows XP. NOTE: this information is based upon a vague pre-advisory by a…

  • CVE-2007-1278Mar 16, 2007
    Adobe Inc.
    Coldfusion
    risk 0.02cvss —epss 0.23

    Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service via unspecified vectors, involving the request of a file in the JRun web root.

  • CVE-2006-6236Dec 3, 2006
    Adobe Inc.
    Acrobat
    risk 0.02cvss —epss 0.20

    Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX…

  • CVE-2006-5330Oct 17, 2006
    Adobe Inc.
    Flashplayer
    risk 0.02cvss —epss 0.23

    CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request…

  • CVE-2005-3525Dec 31, 2005
    Adobe Inc.
    Shockwave Player
    risk 0.02cvss —epss 0.20

    Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remote attackers to execute arbitrary code via crafted large values for unspecified parameters.

  • CVE-2026-48332HigJul 14, 2026
    Adobe Inc.
    Coldfusion
    risk 0.01cvss 7.7epss 0.11

    ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does…

  • CVE-2026-47999MedJul 14, 2026
    Adobe Inc.
    Commerce
    risk 0.01cvss 4.8epss 0.07

    Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page…

  • CVE-2026-47997MedJul 14, 2026
    Adobe Inc.
    Commerce
    risk 0.01cvss 5.9epss 0.09

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploit depends on conditions beyond the attacker's…

  • CVE-2015-8458Dec 21, 2015
    Adobe Inc.
    Acrobat
    risk 0.01cvss —epss 0.08

    Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to…

  • CVE-2015-8457Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.09

    Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8454Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8452Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8450Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8449Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &…

  • CVE-2015-8448Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in the DisplacementMapFilter object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and…

  • CVE-2015-8447Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in the Color object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &…

  • CVE-2015-8446Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.08

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8445Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler…

  • CVE-2015-8442Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &…

  • CVE-2015-8441Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.01cvss —epss 0.07

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

Page 125 of 154