VYPR
← Adobe Inc.

Vendor CVEs

Adobe Inc.

All CVEs

7,875 total · sorted by risk
  • CVE-2009-3462Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."

  • CVE-2009-3461Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors.

  • CVE-2009-3460Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

  • CVE-2009-2996Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2985.

  • CVE-2009-2995Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via unspecified vectors.

  • CVE-2009-2992Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.05

    An unspecified ActiveX control in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 does not properly validate input, which allows attackers to cause a denial of service via unknown vectors.

  • CVE-2009-2988Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which allows attackers to cause a denial of service via unspecified vectors.

  • CVE-2009-2987Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors.

  • CVE-2009-2985Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2996.

  • CVE-2009-2982Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    An unspecified certificate in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow remote attackers to conduct a "social engineering attack" via unknown vectors.

  • CVE-2009-2981Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.

  • CVE-2009-2979Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.03

    Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document.

  • CVE-2009-1878Aug 18, 2009
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.02

    Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.

  • CVE-2009-1877Aug 18, 2009
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875.

  • CVE-2009-1876Aug 18, 2009
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.03

    Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."

  • CVE-2009-1875Aug 18, 2009
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877.

  • CVE-2009-1874Aug 18, 2009
    Adobe Inc.
    Jrun
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-1870Jul 31, 2009
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.01

    Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."

  • CVE-2009-1867Jul 31, 2009
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability."

  • CVE-2009-1865Jul 31, 2009
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.06

    Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."

  • CVE-2009-1863Jul 31, 2009
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a "privilege escalation…

  • CVE-2009-2186Jun 25, 2009
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that "was previously resolved in Shockwave Player 11.0.0.465."

  • CVE-2009-1860Jun 25, 2009
    Adobe Inc.
    Shockwave Player
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content.

  • CVE-2009-2028Jun 11, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."

  • CVE-2009-1599May 11, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.02

    Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as…

  • CVE-2009-1598May 11, 2009
    Google
    Chrome
    risk 0.00cvss —epss 0.02

    Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document…

  • CVE-2009-1597May 11, 2009
    Mozilla Corporation
    Firefox
    risk 0.00cvss —epss 0.02

    Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document…

  • CVE-2009-1365May 1, 2009
    Adobe Inc.
    Flash Media Server
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server…

  • CVE-2009-1062Mar 25, 2009
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.06

    Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061.

  • CVE-2009-0524Feb 26, 2009
    Adobe Inc.
    Robohelp
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp.

  • CVE-2009-0523Feb 26, 2009
    Adobe Inc.
    Robohelp
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled when displaying the Help Errors log.

  • CVE-2009-0522Feb 26, 2009
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.03

    Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the "mouse pointer display," related to a "Clickjacking attack."

  • CVE-2009-0521Feb 26, 2009
    Adobe Inc.
    Flash Player For Linux
    risk 0.00cvss —epss 0.01

    Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH.

  • CVE-2009-0114Feb 26, 2009
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to "a potential Clickjacking…

  • CVE-2008-6062Feb 5, 2009
    Adobe Inc.
    Dreamweaver
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName…

  • CVE-2008-5363Dec 8, 2008
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of…

  • CVE-2008-5362Dec 8, 2008
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from…

  • CVE-2008-5361Dec 8, 2008
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.04

    The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing (1) DefineConstantPool, (2) ActionJump, (3) ActionPush, (4) ActionTry, and unspecified…

  • CVE-2008-5331Dec 5, 2008
    Adobe Inc.
    Acrobat
    risk 0.00cvss —epss 0.02

    Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack.

  • CVE-2008-5109Nov 25, 2008
    Adobe Inc.
    Flash Media Server
    risk 0.00cvss —epss 0.02

    The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software.

  • CVE-2008-5108Nov 17, 2008
    Adobe Inc.
    Air
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors.

  • CVE-2008-4831Nov 10, 2008
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and obtain sensitive information or possibly gain privileges, via unknown vectors.

  • CVE-2008-4823Nov 10, 2008
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute.

  • CVE-2008-4822Nov 10, 2008
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy.

  • CVE-2008-4821Nov 10, 2008
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.

  • CVE-2008-4820Nov 10, 2008
    Adobe Inc.
    Flash Player ActiveX control
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.

  • CVE-2008-4819Nov 10, 2008
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

  • CVE-2008-4818Nov 10, 2008
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.05

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.

  • CVE-2008-4816Nov 5, 2008
    Adobe Inc.
    Reader
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors.

  • CVE-2008-4503Oct 9, 2008
    Adobe Inc.
    Flashplayer
    risk 0.00cvss —epss 0.04

    The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and…

Page 156 of 158