Browse CVEs

HIGH 7.5 CVE-2018-15960EPSS 6% Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known v… Coldfusion No fix yet Fix from $1,9502018-09-25 HIGH 7.5 CVE-2018-15964EPSS 8% Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known v… Coldfusion Mitigation only Fix from $1,9502018-09-25 MEDIUM 5.3 CVE-2018-15962EPSS 6% Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a directory listing vulnerability. … Coldfusion Mitigation only Fix from $1,6002018-09-25 MEDIUM 5.3 CVE-2018-15963EPSS 6% Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Su… Coldfusion Mitigation only Fix from $1,6002018-09-25 CRITICAL 9.8 CVE-2018-4939 KEVEPSS 63% Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vu… Coldfusion Mitigation only Fix from $2,3002018-05-19 HIGH 7.8 CVE-2018-4938 Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerabili… Coldfusion Mitigation only Fix from $1,9502018-05-19 HIGH 7.5 CVE-2018-4942 Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processin… Coldfusion Mitigation only Fix from $1,9502018-05-19 MEDIUM 6.1 CVE-2018-4940 Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. … Coldfusion Mitigation only Fix from $1,6002018-05-19 MEDIUM 6.1 CVE-2018-4941 Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. … Coldfusion Mitigation only Fix from $1,6002018-05-19 HIGH 7.5 CVE-2017-3111EPSS 7% An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Sensitive tokens are included in http GET requests under certain circumstance… Experience Manager Mitigation only Fix from $1,9502017-12-09 MEDIUM 6.1 CVE-2017-3109 An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager has a reflected cross-site scripting vulnerability i… Experience Manager Mitigation only Fix from $1,6002017-12-09 MEDIUM 6.1 CVE-2017-11296 An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has… Experience Manager Mitigation only Fix from $1,6002017-12-09 CRITICAL 9.8 CVE-2017-3095EPSS 6% Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine. Successful exploitat… Digital Editions Mitigation only Fix from $2,3002017-06-20 HIGH 7.5 CVE-2017-3067 Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service… Experience Manager Forms Mitigation only Fix from $1,9502017-05-09 HIGH 7.5 CVE-2016-6936 Adobe AIR SDK & Compiler before 23.0.0.257 on Windows does not support Android runtime-analytics transport security, which might allow remote attacke… Air Sdk \& Compiler Mitigation only Fix from $1,9502016-09-16 MEDIUM 6.1 CVE-2016-4159 Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attacker… Coldfusion Mitigation only Fix from $1,6002016-06-16 MEDIUM 5.9 CVE-2016-1115 Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which m… Coldfusion Mitigation only Fix from $1,6002016-05-11 CRITICAL 9.8 CVE-2016-1114EPSS 9% Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafte… Coldfusion Mitigation only Fix from $2,3002016-05-11 MEDIUM 6.1 CVE-2016-1113 Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attacker… Coldfusion Mitigation only Fix from $1,6002016-05-11 HIGH 7.5 CVE-2016-1035 Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via unspecified vectors. Robohelp Mitigation only Fix from $1,9502016-04-12 HIGH 9.3 CVE-2014-9161 CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on… Acrobat Reader No fix yet Fix from $1,9502015-01-30 HIGH 10.0 CVE-2014-9165EPSS 8% Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute … Acrobat Reader Mitigation only Fix from $1,9502014-12-10 HIGH 10.0 CVE-2014-9159EPSS 10% Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute ar… Acrobat Mitigation only Fix from $1,9502014-12-10 HIGH 10.0 CVE-2014-9158EPSS 10% Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial … Acrobat Mitigation only Fix from $1,9502014-12-10 HIGH 10.0 CVE-2014-8461EPSS 9% Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial … Acrobat Reader Mitigation only Fix from $1,9502014-12-10 HIGH 10.0 CVE-2014-8459EPSS 9% Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial … Acrobat Mitigation only Fix from $1,9502014-12-10 HIGH 10.0 CVE-2014-8460EPSS 10% Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute ar… Acrobat Reader Mitigation only Fix from $1,9502014-12-10 HIGH 10.0 CVE-2014-8458EPSS 9% Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial … Acrobat Reader Mitigation only Fix from $1,9502014-12-10 HIGH 10.0 CVE-2014-8457EPSS 13% Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute ar… Acrobat Mitigation only Fix from $1,9502014-12-10 HIGH 10.0 CVE-2014-8456EPSS 9% Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial … Acrobat Reader Mitigation only Fix from $1,9502014-12-10