Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

174 records in Shockwave Player · all components

Priority HIGH 79

The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chu…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.74626 Published 2010-10-26 No fix listed CWE-119
Priority HIGH 67

Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion metho…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.32338 Published 2007-11-14 No fix listed CWE-119
Priority MEDIUM 60

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, C…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.18144 Published 2012-05-09 No fix listed CWE-119
Priority MEDIUM 55

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-527…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09568 Published 2012-10-23 No fix listed CWE-119
Priority MEDIUM 55

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4175, and CVE-2012-527…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09568 Published 2012-10-23 No fix listed CWE-119
Priority MEDIUM 55

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4175, and CVE-2012-527…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09568 Published 2012-10-23 No fix listed CWE-119
Priority MEDIUM 55

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4173, CVE-2012-4174, CVE-2012-4175, and CVE-2012-527…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09693 Published 2012-10-23 No fix listed CWE-119
Priority MEDIUM 55

Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated wi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.13014 Published 2010-08-26 No fix listed CWE-189
Priority MEDIUM 54

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-417…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08579 Published 2012-10-23 No fix listed CWE-119
Priority MEDIUM 52

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2031, C…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06169 Published 2012-05-09 No fix listed CWE-119
Priority MEDIUM 52

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2030, CVE-2012-2031, C…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0625 Published 2012-05-09 No fix listed CWE-119
Load more
Open these records in search →