Macromedia

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-2167 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to...Show more Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed (1) GIF or (2) JPEG data.Show less
CVE-2010-2166 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vecto...Show more Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.Show less
CVE-2010-2165 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vecto...Show more Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.Show less
CVE-2010-2164 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unsp...Show more Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."Show less
CVE-2010-2163 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.
CVE-2010-2162 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors rela...Show more Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors related to improper length calculation and the (1) STSC, (2) STSZ, and (3) STCO atoms.Show less
CVE-2010-2161 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."
CVE-2010-2160 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset...Show more Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2, related to getouterscope, a different vulnerability than CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.Show less
CVE-2009-3793 2Adobe Macromedia 3Air Flash PlayerFlash Player Apr 29, 2026 Jun 15, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitr...Show more Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitrary code via unknown vectors.Show less
CVE-2007-1403 1Macromedia 1Shockwave Apr 23, 2026 Mar 10, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7 crash) and possibly execute arbitrary co...Show more Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7 crash) and possibly execute arbitrary code via a long (1) BGCOLOR, (2) SRC, (3) AutoStart, (4) Sound, (5) DrawLogo, or (6) DrawProgress property value, different vectors than CVE-2006-6885.Show less
CVE-2006-6885 1Macromedia 1Shockwave Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL attribute.
CVE-2006-6827 1Macromedia 1Flash Player Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the Flash8b.AllowScriptAccess method.
CVE-2006-3979 1Macromedia 1Coldfusion Apr 16, 2026 Aug 9, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator.
CVE-2006-2364 1Macromedia 1Coldfusion Apr 16, 2026 May 15, 2006 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a "_required" field when the associated normal...Show more Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a "_required" field when the associated normal field is missing or empty, which is not sanitized before being presented in an error message.Show less
CVE-2006-0024 1Macromedia 1Flash Player Apr 16, 2026 Mar 15, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file.
CVE-2005-4473 1Macromedia 1Jrun Apr 16, 2026 Dec 22, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed URL."
CVE-2005-4472 1Macromedia 1Jrun Apr 16, 2026 Dec 22, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conver...Show more Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters.Show less
CVE-2005-4345 1Macromedia 1Coldfusion Apr 16, 2026 Dec 19, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges.
CVE-2005-4344 1Macromedia 1Coldfusion Apr 16, 2026 Dec 19, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the specified configuration.
CVE-2005-4343 1Macromedia 1Coldfusion Apr 16, 2026 Dec 19, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in a...Show more Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".Show less

Previous 123 4 5 6 Next