Vulnerabilities (CVE)

Filtered by vendor Adobe Subscribe
Total 5509 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-11287 1 Adobe 1 Connect 2017-12-14 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
CVE-2017-11291 1 Adobe 1 Connect 2017-12-14 6.4 MEDIUM 10.0 CRITICAL
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls.
CVE-2017-11289 1 Adobe 1 Connect 2017-12-14 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
CVE-2017-11288 1 Adobe 1 Connect 2017-12-14 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.
CVE-2017-11296 1 Adobe 1 Experience Manager 2017-12-14 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has been resolved in Adobe Experience Manager.
CVE-2017-3109 1 Adobe 1 Experience Manager 2017-12-14 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability in the HtmlRendererServlet.
CVE-2012-0780 1 Adobe 2 Illustrator, Illustrator Cs5.5 2017-12-05 10.0 HIGH N/A
Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026.
CVE-2012-0778 1 Adobe 3 Flash Cs3, Flash Cs4, Flash Cs5.5 2017-12-05 10.0 HIGH N/A
Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-4118 2 Adobe, Microsoft 2 Connect, Windows 2017-11-29 7.2 HIGH 7.8 HIGH
Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors.
CVE-2012-2033 1 Adobe 1 Shockwave Player 2017-11-22 10.0 HIGH N/A
Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2032.
CVE-2012-2032 1 Adobe 1 Shockwave Player 2017-11-22 10.0 HIGH N/A
Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2033.
CVE-2012-2031 1 Adobe 1 Shockwave Player 2017-11-22 10.0 HIGH N/A
Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2032, and CVE-2012-2033.
CVE-2012-2030 1 Adobe 1 Shockwave Player 2017-11-22 10.0 HIGH N/A
Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2031, CVE-2012-2032, and CVE-2012-2033.
CVE-2012-2029 1 Adobe 1 Shockwave Player 2017-11-22 10.0 HIGH N/A
Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2030, CVE-2012-2031, CVE-2012-2032, and CVE-2012-2033.
CVE-2012-2028 1 Adobe 3 Photoshop, Photoshop Cs4, Photoshop Cs5.5 2017-11-22 9.3 HIGH N/A
Buffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2012-6271 1 Adobe 1 Shockwave Player 2017-11-17 9.3 HIGH N/A
Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra.
CVE-2012-6270 1 Adobe 1 Shockwave Player 2017-11-17 9.3 HIGH N/A
Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave content with a certain compatibility parameter, related to a "downgrading" attack.
CVE-2011-2461 1 Adobe 1 Flex Sdk 2017-11-09 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains.
CVE-2007-2365 1 Adobe 4 Golive, Illustrator, Photoshop and 1 more 2017-10-11 9.3 HIGH N/A
Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.
CVE-2007-2244 1 Adobe 3 Golive, Illustrator, Photoshop 2017-10-11 9.3 HIGH N/A
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.