Search vulnerabilities

Results 8,040

Export CSV
CVE-2017-3109

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability in the HtmlRendererServlet.

CVSS 3.0 · 6.1 Medium EPSS 2.9% KEV · Not listed
Vendors
CVE-2017-3106

flash-plugin: Remote Code Execution due to Type Confusion issue fixed in APSB17-23

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 22.3% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2017-3105

Adobe RoboHelp has an Open Redirect vulnerability. This affects versions before RH12.0.4.460 and RH2017 before RH2017.0.2.

CVSS 3.0 · 6.1 Medium EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2017-3101

Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack.

CVSS 3.0 · 7.5 High EPSS 5.6% KEV · Not listed
Vendors
Products
CVE-2017-3100

flash-plugin: information disclosure issues fixed in APSB17-21

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.

CVSS 3.1 · 6.5 Medium EPSS 3.7% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2017-3099

flash-plugin: code execution issue fixed in APSB17-21

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 9.6% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server.

CVSS 3.0 · 9.8 Critical EPSS 6.9% KEV · Not listed
Vendors
Products
CVE-2017-3097

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 9.8 Critical EPSS 7.1% KEV · Not listed
Vendors
Products
CVE-2017-3096

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Products
CVE-2017-3095

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Products
CVE-2017-3102

Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack.

CVSS 3.0 · 6.1 Medium EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2017-3091

Adobe Digital Editions 4.5.4 and earlier versions 4.5.4 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 7.5 High EPSS 8.1% KEV · Not listed
Vendors
Products
CVE-2017-3090

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 9.8 Critical EPSS 8.5% KEV · Not listed
Vendors
Products
CVE-2017-3089

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Products
CVE-2017-3088

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Vendors
Products
CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Products
CVE-2017-3086

Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 9.8 Critical EPSS 6.9% KEV · Not listed
Vendors
Products