Search vulnerabilities

Results 1,104

Export CSV
CVE-2015-0332

flash-plugin: multiple code execution issues fixed in APSB15-05

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2015-0346

flash-plugin: multiple code execution issues fixed in APSB15-06

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.

CVSS 2.0 · 10.0 Critical EPSS 10.4% KEV · Not listed
Vendors
Adobe Apple Linux and 4 more
Products
CVE-2015-0337

flash-plugin: cross-domain policy bypass (APSB15-05)

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 4.4% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2015-0349

flash-plugin: multiple code execution issues fixed in APSB15-06

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.

CVSS 2.0 · 10.0 Critical EPSS 8.2% KEV · Not listed
Vendors
Adobe Apple Linux and 4 more
Products
CVE-2015-0351

flash-plugin: multiple code execution issues fixed in APSB15-06

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.

CVSS 2.0 · 10.0 Critical EPSS 7.8% KEV · Not listed
Vendors
Adobe Apple Linux and 4 more
Products
CVE-2015-0327

flash-plugin: multiple code execution flaws (APSB15-04)

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.

CVSS 2.0 · 10.0 Critical EPSS 9.1% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2015-0326

flash-plugin: multiple code execution flaws (APSB15-04)

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.

CVSS 2.0 · 10.0 Critical EPSS 6.3% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2015-0355

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed
Vendors
Adobe Apple Linux and 4 more
Products
CVE-2015-0328

flash-plugin: multiple code execution flaws (APSB15-04)

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.

CVSS 2.0 · 10.0 Critical EPSS 5.5% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2014-0503

flash-plugin: same origin policy bypass (APSB14-08)

Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVSS 2.0 · 6.4 Medium EPSS 4.4% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2015-0324

flash-plugin: multiple code execution flaws (APSB15-04)

Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 9.1% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2014-0506

flash-plugin: two flaws leading to code execution (APSB14-09)

Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.

CVSS 2.0 · 10.0 Critical EPSS 7.6% KEV · Not listed
CVE-2014-0507

flash-plugin: two flaws leading to code execution (APSB14-09)

Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 6.4% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2014-0508

flash-plugin: information disclosure flaw (APSB14-09)

Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 4.7% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2015-0325

flash-plugin: multiple code execution flaws (APSB15-04)

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.

CVSS 2.0 · 10.0 Critical EPSS 6.3% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2014-0510

flash-plugin: use-after-free flaw leads to arbitrary code execution

Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.

CVSS 2.0 · 10.0 Critical EPSS 8.5% KEV · Not listed
Vendors
CVE-2014-0515

flash-plugin: buffer overflow vulnerability leads to arbitrary code execution (APSB14-13)

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.

CVSS 2.0 · 10.0 Critical EPSS 94.5% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2014-0516

flash-plugin: same origin policy bypass (APSB14-14)

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2015-0329

flash-plugin: multiple code execution flaws (APSB15-04)

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.

CVSS 2.0 · 10.0 Critical EPSS 6.1% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products
CVE-2015-0338

flash-plugin: multiple code execution issues fixed in APSB15-05

Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 7.0% KEV · Not listed
Vendors
Adobe Apple Linux and 2 more
Products