Priority HIGH 77
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acr…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.69679 · Published 2010-10-29 · Fixed CWE-119
Priority MEDIUM 56
Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7 crash) and possibly execute arbitrary co…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.2941 · Published 2007-03-10 · No fix listed
Priority MEDIUM 56
Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10718 · Published 2003-04-02 · No fix listed
Priority MEDIUM 56
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10583 · Published 2000-11-29 · No fix listed
Priority MEDIUM 55
Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09133 · Published 2003-04-02 · No fix listed
Priority MEDIUM 53
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary co…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07104 · Published 2004-11-19 · No fix listed
Priority MEDIUM 52
Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08995 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 52
Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitr…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09371 · Published 2010-06-15 · Fixed CWE-399
Priority MEDIUM 51
Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08719 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 50
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the Action…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06751 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 50
Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitra…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06743 · Published 2010-06-15 · Fixed CWE-94
Priority MEDIUM 50
Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0744 · Published 2010-06-15 · Fixed CWE-189
Priority MEDIUM 50
Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0744 · Published 2010-06-15 · Fixed CWE-189
Priority MEDIUM 50
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0744 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 50
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0744 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 50
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors related t…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06751 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 50
Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0744 · Published 2010-06-15 · Fixed CWE-189
Priority MEDIUM 50
Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unsp…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0744 · Published 2010-06-15 · Fixed CWE-399
Priority MEDIUM 50
Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07127 · Published 2010-06-15 · Fixed CWE-94
Priority MEDIUM 50
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors rela…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06751 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 50
Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07127 · Published 2010-06-15 · Fixed CWE-94
Priority MEDIUM 50
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06751 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 49
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers to cause a denial of service (memory cor…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05957 · Published 2010-06-15 · No fix listed CWE-119
Priority MEDIUM 49
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vecto…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06081 · Published 2010-06-15 · Fixed CWE-119
Priority MEDIUM 49
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vecto…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06081 · Published 2010-06-15 · Fixed CWE-119
Load more