CVE-2010-0190
Published Apr 14, 2010Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary we…
Vendor archive
adobe CVEs
Beta · best-effort7,389 CVEs tagged to vendor adobe — 1,827 Critical, 2,802 High, 2,605 Medium, 155 Low, 0 Unrated.
CVE-2010-1241
Published Apr 5, 2010Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers…
CVE-2010-1240
Published Apr 5, 2010Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which ma…
CVE-2009-4764
Published Apr 5, 2010Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users into executing arbi…
CVE-2010-0189
Published Feb 23, 2010A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2010-0188
Published Feb 22, 2010Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute a…
- evidence mentions
- 21
- Buzz score
- 66.0
KEV listed
CVE-2010-0187
Published Feb 15, 2010Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.
CVE-2010-0186
Published Feb 15, 2010Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote at…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-3960
Published Feb 15, 2010Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and Cold…
- evidence mentions
- 6
- Buzz score
- 54.0
KEV listed
CVE-2010-0185
Published Feb 3, 2010The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain colle…
CVE-2010-0379
Published Jan 21, 2010Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP SP2 and SP3, might allow remote attack…
CVE-2010-0378
Published Jan 21, 2010Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Fla…
CVE-2009-4003
Published Jan 21, 2010Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecified block type in a Shockwave file, lead…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-4002
Published Jan 21, 2010Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-3959
Published Jan 13, 2010Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary cod…
CVE-2009-3958
Published Jan 13, 2010Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x befo…
CVE-2009-3957
Published Jan 13, 2010Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to cause a denial of service (NULL pointer dereference) via unspecified…
CVE-2009-3956
Published Jan 13, 2010The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecif…
CVE-2009-3955
Published Jan 13, 2010Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c…
CVE-2009-3954
Published Jan 13, 2010The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vecto…
CVE-2009-3953
Published Jan 13, 2010The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code v…
- Buzz score
- 25.0
CVE-2009-3952
Published Jan 8, 2010Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2009-3792
Published Dec 21, 2009Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-3791
Published Dec 21, 2009Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service (resource exhaustion) via unknown vectors.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2009-4324
Published Dec 15, 2009Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows rem…
- Buzz score
- 25.0
Showing 7,101-7,125 of 7,389 CVEsPage 285 of 296