Skip to content
Noroxi

macromedia records

116 published records for vendor macromedia.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 0.9%
Pre-auth RCE
47
With a fix record
16.4%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    116 records
    • CVE-2010-3654
      58Plan

      Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authp

      CriticalCVSS 9.3WeaponizedEPSS 70%

      adobe · flash playerOct 29, 2010

    • CVE-2002-0665
      43Plan

      Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.

      CriticalCVSS 10.0Proof of conceptEPSS 11%

      macromedia · jrunJul 11, 2002

    • CVE-2000-1053
      43Plan

      Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack an

      CriticalCVSS 10.0Proof of conceptEPSS 11%

      macromedia · jrunDec 11, 2000

    • CVE-2002-0801
      43Plan

      Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to th

      CriticalCVSS 10.0No exploitEPSS 9%

      macromedia · jrunAug 12, 2002

    • CVE-2004-0646
      42Plan

      Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apach

      CriticalCVSS 10.0No exploitEPSS 7%

      macromedia · coldfusionDec 23, 2004

    • CVE-2009-3793
      40Plan

      Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attack

      CriticalCVSS 9.3No exploitEPSS 9%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2167
      40Plan

      Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, mi

      CriticalCVSS 9.3No exploitEPSS 9%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2185
      40Plan

      Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers t

      CriticalCVSS 9.3No exploitEPSS 9%

      adobe · flash playerJun 15, 2010

    • CVE-2001-1514
      40Plan

      ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass secu

      CriticalCVSS 10.0No exploitEPSS 1%

      macromedia · coldfusionDec 31, 2001

    • CVE-2007-1403
      39Monitor

      Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a

      HighCVSS 7.5Proof of conceptEPSS 29%

      macromedia · shockwaveMar 10, 2007

    • CVE-2010-2164
      39Monitor

      Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allo

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2173
      39Monitor

      Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2170
      39Monitor

      Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2174
      39Monitor

      Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2181
      39Monitor

      Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2183
      39Monitor

      Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2161
      39Monitor

      Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2163
      39Monitor

      Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, mi

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2188
      39Monitor

      Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of serv

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2160
      39Monitor

      Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of serv

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2162
      39Monitor

      Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of serv

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2171
      39Monitor

      Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of serv

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2186
      39Monitor

      Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attack

      CriticalCVSS 9.3No exploitEPSS 7%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2165
      39Monitor

      Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of serv

      CriticalCVSS 9.3No exploitEPSS 6%

      adobe · flash playerJun 15, 2010

    • CVE-2010-2178
      39Monitor

      Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of serv

      CriticalCVSS 9.3No exploitEPSS 6%

      adobe · flash playerJun 15, 2010