Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Macromedia

Macromedia vulnerabilities

Products

Flash Player42
Jrun33
Coldfusion24
Shockwave3
Shockwave Flash Plugin3
Coldfusion Fusebox2
Coldfusion Professional2
Sitespring2

Newest

Known exploitedIn KEVPublic exploitFix available

macromedia coldfusionColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses...CVE-2005-10225.0 MediumApril 9, 2005
macromedia coldfusionMacromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows...CVE-2004-2505Public exploit5.0 MediumDecember 31, 2004
macromedia contribute, studio +1 moreThe Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2...CVE-2004-23357.2 HighDecember 31, 2004
macromedia coldfusionColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and...CVE-2004-23315.5 MediumDecember 31, 2004
macromedia coldfusionColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP...CVE-2004-23305.0 MediumDecember 31, 2004
macromedia coldfusionMacromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject...CVE-2004-22047.2 HighDecember 31, 2004
macromedia jrunSession fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user...CVE-2004-21827.5 HighDecember 31, 2004
macromedia jrun, hitachi cosminexus enterprise, cosminexus server +1 more +3 moreJRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to...CVE-2004-14787.5 HighDecember 31, 2004
macromedia jrunCross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote...CVE-2004-14774.3 MediumDecember 31, 2004
macromedia jrun, coldfusion +1 moreBuffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such...CVE-2004-064610.0 HighNovember 19, 2004
macromedia coldfusion, jrun, hitachi cosminexus enterprise +1 more +3 moreThe Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE...CVE-2004-09285.0 MediumOctober 5, 2004
macromedia coldfusionThe HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is...CVE-2004-04072.6 LowApril 17, 2004
macromedia coldfusion, jrun, sun one application server +2 moreUnknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects...CVE-2004-18155.0 MediumMarch 15, 2004
macromedia coldfusion, coldfusion professional +1 moreThe default configuration of ColdFusion MX has the "Enable Robust Exception Information" option...CVE-2003-1469Public exploit5.0 MediumDecember 31, 2003
macromedia flash player, director +1 moreMacromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that...CVE-2003-1017Public exploit5.0 MediumDecember 17, 2003
macromedia flashCross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows...CVE-2003-02084.3 MediumApril 15, 2003
macromedia flash playerMacromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf...CVE-2002-15345.0 MediumMarch 31, 2003
macromedia flash player, shockwave +1 moreMacromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain...CVE-2002-14675.0 MediumMarch 18, 2003
macromedia jrunUnknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log...CVE-2002-21875.0 MediumDecember 31, 2002
macromedia jrunMacromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files...CVE-2002-21865.0 MediumDecember 31, 2002
macromedia coldfusion, coldfusion professional +1 moreBuffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers...CVE-2002-19925.0 MediumDecember 31, 2002
macromedia flash playerMacromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of...CVE-2002-18815.0 MediumDecember 31, 2002
macromedia jrunMacromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve...CVE-2002-18555.0 MediumDecember 31, 2002
macromedia coldfusion, microsoft internet information services, windows 2000 +2 moreCross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion...CVE-2002-1700Public exploitEPSS 24.3%4.3 MediumDecember 31, 2002
macromedia flash playerMacromedia Flash Player 6 does not terminate connections when the user leaves the web page, which...CVE-2002-16255.0 MediumDecember 31, 2002
macromedia flash playerMacromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via...CVE-2002-13827.5 HighDecember 23, 2002
macromedia jrunHeap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in...CVE-2002-13107.5 HighNovember 21, 2002
macromedia coldfusionHeap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in...CVE-2002-13097.5 HighNovember 21, 2002
macromedia jrunJRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in...CVE-2002-10255.0 MediumOctober 4, 2002
macromedia sitespringCross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for...CVE-2002-1027Public exploit7.5 HighAugust 31, 2002
macromedia sitespringMacromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote...CVE-2002-10265.0 MediumAugust 31, 2002
macromedia jrunThe Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service ...CVE-2002-0937Public exploit5.0 MediumAugust 31, 2002
macromedia shockwave flashThe decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via...CVE-2002-08467.5 HighAugust 12, 2002
macromedia jrunBuffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to...CVE-2002-080110.0 HighAugust 12, 2002
macromedia jrunMacromedia JRun Administration Server allows remote attackers to bypass authentication on the...CVE-2002-0665Public exploitEPSS 10.7%10.0 HighJuly 11, 2002
macromedia flash playerBuffer overflow in Flash OCX for Macromedia Flash 6 revision 23 (6,0,23,0) allows remote...CVE-2002-06057.5 HighJune 18, 2002
macromedia flash playerStandalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute...CVE-2002-04777.5 HighJune 11, 2002
macromedia flash playerStandalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and...CVE-2002-04765.0 MediumJune 11, 2002
macromedia jrunMacromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client...CVE-2001-15455.0 MediumDecember 31, 2001
macromedia jrunDirectory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows...CVE-2001-15445.0 MediumDecember 31, 2001
macromedia coldfusionColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to ...CVE-2001-151410.0 HighDecember 31, 2001
macromedia jrunMacromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs...CVE-2001-15137.5 HighDecember 31, 2001
macromedia jrunUnknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF...CVE-2001-15126.4 MediumDecember 31, 2001
macromedia jrunJRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read...CVE-2001-15115.0 MediumDecember 31, 2001
macromedia jrunAllaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS...CVE-2001-15105.0 MediumDecember 31, 2001
macromedia jrunSSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for...CVE-2001-09265.0 MediumNovember 28, 2001
macromedia coldfusion serverExample applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent...CVE-2001-05357.5 HighOctober 12, 2001
macromedia coldfusionUnknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to...CVE-2001-14277.5 HighJuly 11, 2001
macromedia jrunCross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to...CVE-2001-10847.5 HighJuly 2, 2001
macromedia jrunAllaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web...CVE-2001-01795.0 MediumMay 3, 2001
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open