Login Request a demo
MA
Vendor
Macromedia
19 products with CVEs on record
122
CVEs
0
On KEV
0
New 30D
Products
FP
Flash Player
Macromedia
–
42 CVEs0 on KEV0 new
JR
Jrun
Macromedia
–
33 CVEs0 on KEV0 new
CO
Coldfusion
Macromedia
5.5
24 CVEs0 on KEV0 new
SH
Shockwave
Macromedia
–
3 CVEs0 on KEV0 new
SF
Shockwave Flash Plugin
Macromedia
–
3 CVEs0 on KEV0 new
CF
Coldfusion Fusebox
Macromedia
–
2 CVEs0 on KEV0 new
CP
Coldfusion Professional
Macromedia
–
2 CVEs0 on KEV0 new
SI
Sitespring
Macromedia
–
2 CVEs0 on KEV0 new
BR
Breeze
Macromedia
–
1 CVEs0 on KEV0 new
CS
Coldfusion Server
Macromedia
–
1 CVEs0 on KEV0 new
CO
Contribute
Macromedia
–
1 CVEs0 on KEV0 new
DI
Director
Macromedia
–
1 CVEs0 on KEV0 new
DR
Dreamweaver
Macromedia
–
1 CVEs0 on KEV0 new
FL
Flash
Macromedia
–
1 CVEs0 on KEV0 new
FC
Flash Communication Server
Macromedia
–
1 CVEs0 on KEV0 new
FM
Flash Media Server
Macromedia
–
1 CVEs0 on KEV0 new
MS
Matrix Screen Saver
Macromedia
–
1 CVEs0 on KEV0 new
SF
Shockwave Flash
Macromedia
–
1 CVEs0 on KEV0 new
ST
Studio
Macromedia
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2010-3654
FP
Flash Player
Macromedia
–
70%
Oct 29Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or…
CVE-2010-2189
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers…
CVE-2010-2188
FP
Flash Player
Macromedia
–
7%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2187
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2186
FP
Flash Player
Macromedia
–
7%
Jun 15Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service…
CVE-2010-2185
FP
Flash Player
Macromedia
–
9%
Jun 15Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via…
CVE-2010-2184
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2183
FP
Flash Player
Macromedia
–
7%
Jun 15Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via…
CVE-2010-2182
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2181
FP
Flash Player
Macromedia
–
7%
Jun 15Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via…
CVE-2010-2180
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2178
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2177
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2176
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2175
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2174
FP
Flash Player
Macromedia
–
7%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related…
CVE-2010-2173
FP
Flash Player
Macromedia
–
7%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related…
CVE-2010-2171
FP
Flash Player
Macromedia
–
7%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2170
FP
Flash Player
Macromedia
–
7%
Jun 15Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via…
CVE-2010-2169
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allow attackers to cause a denial of service (pointer memory corruption) or…
CVE-2010-2167
FP
Flash Player
Macromedia
–
9%
Jun 15Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute…
CVE-2010-2166
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2165
FP
Flash Player
Macromedia
–
6%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-2164
FP
Flash Player
Macromedia
–
7%
Jun 15Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code…
CVE-2010-2163
FP
Flash Player
Macromedia
–
7%
Jun 15Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute…
CVE-2010-2162
FP
Flash Player
Macromedia
–
7%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or…
CVE-2010-2161
FP
Flash Player
Macromedia
–
7%
Jun 15Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via…
CVE-2010-2160
FP
Flash Player
Macromedia
–
7%
Jun 15Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly…
CVE-2009-3793
FP
Flash Player
Macromedia
–
9%
Jun 15Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service…
CVE-2007-1403
SH
Shockwave
Macromedia
–
29%
Mar 10Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7…
CVE-2006-6827
FP
Flash Player
Macromedia
–
4%
Dec 31Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the Flash8b.AllowScriptAccess method
CVE-2006-6885
SH
Shockwave
Macromedia
–
8%
Dec 31An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the swURL…
CVE-2006-3979
CO
Coldfusion
Macromedia
–
0%
Aug 9The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator
CVE-2006-2364
CO
Coldfusion
Macromedia
–
1%
May 15Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a…
CVE-2006-0024
FP
Flash Player
Macromedia
–
7%
Mar 15Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file
CVE-2005-4473
JR
Jrun
Macromedia
–
1%
Dec 22Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed URL."
CVE-2005-4472
JR
Jrun
Macromedia
–
4%
Dec 22Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request…
CVE-2005-4342
CO
Coldfusion
Macromedia
–
2%
Dec 19ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow…
CVE-2005-4345
CO
Coldfusion
Macromedia
–
0%
Dec 19Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges
CVE-2005-4344
CO
Coldfusion
Macromedia
–
0%
Dec 19Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the…
CVE-2005-4343
CO
Coldfusion
Macromedia
–
1%
Dec 19Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is…
CVE-2005-4216
FM
Flash Media Server
Macromedia
–
4%
Dec 14The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service (application crash) via a malformed…
CVE-2005-3901
FC
Flash Communication Server
Macromedia
–
1%
Nov 29Macromedia Flash Communication Server MX 1.0 and 1.5 does not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or crash),…
CVE-2005-3591
FP
Flash Player
Macromedia
–
10%
Nov 16Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash)…
CVE-2005-2628
FP
Flash Player
Macromedia
–
7%
Nov 5Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array…
CVE-2005-3112
BR
Breeze
Macromedia
–
0%
Sep 30The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash, which allows attackers with access to the database to…
CVE-2005-2480
CF
Coldfusion Fusebox
Macromedia
–
4%
Aug 5Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter, which is not…
CVE-2005-2481
CF
Coldfusion Fusebox
Macromedia
–
1%
Aug 5ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as…
CVE-2005-2306
CO
Coldfusion
Macromedia
–
0%
Jul 19Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could…
CVE-2005-1555
CO
Coldfusion
Macromedia
–
1%
May 10Cross-site scripting (XSS) vulnerability in the JRun Web Server in ColdFusion MX 7.0 allows remote attackers to inject arbitrary script or HTML via the URL, which is not properly…
CVE-2005-1022
CO
Coldfusion
Macromedia
–
2%
May 2ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information
CVE-2004-2204
CO
Coldfusion
Macromedia
–
0%
Dec 31Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities…
CVE-2004-1477
JR
Jrun
Macromedia
–
3%
Dec 31Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session
CVE-2004-1478
CO
Coldfusion
Macromedia
–
3%
Dec 31JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session
CVE-2004-2182
JR
Jrun
Macromedia
–
1%
Dec 31Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server
CVE-2004-2330
CO
Coldfusion
Macromedia
–
2%
Dec 31ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields
CVE-2004-2331
CO
Coldfusion
Macromedia
5.5
1%
Dec 31ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java…
CVE-2004-2335
CO
Contribute
Macromedia
–
0%
Dec 31The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the…
CVE-2004-2505
CO
Coldfusion
Macromedia
–
3%
Dec 31Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by…
CVE-2004-0646
CO
Coldfusion
Macromedia
–
7%
Dec 23Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows…