Vulnerabilities > Adobe > Medium

DATE CVE VULNERABILITY TITLE RISK
2011-02-10 CVE-2011-0580 Cross-Site Scripting vulnerability in Adobe Coldfusion
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
adobe CWE-79
4.3
2011-02-10 CVE-2011-0575 DLL Loading Arbitrary Code Execution vulnerability in Adobe Flash Player
Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
local
adobe
6.9
2011-02-01 CVE-2011-0735 Cross-Site Scripting vulnerability in Adobe Coldfusion
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."
network
adobe CWE-79
4.3
2011-02-01 CVE-2011-0734 Cross-Site Scripting vulnerability in Adobe Coldfusion
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a "tag body" attack.
network
adobe CWE-79
4.3
2011-02-01 CVE-2011-0733 Cross-Site Scripting vulnerability in Adobe Coldfusion
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header in an id=- query to a .cfm file.
network
adobe CWE-79
4.3
2010-11-10 CVE-2010-3634 Remote Denial of Service vulnerability in Adobe Flash Media Server
Unspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service via unknown vectors.
network
low complexity
adobe
5.0
2010-11-10 CVE-2010-3633 Resource Management Errors vulnerability in Adobe Flash Media Server
Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service (memory consumption) via unspecified vectors.
network
low complexity
adobe CWE-399
5.0
2010-11-07 CVE-2010-3638 Information Disclosure vulnerability in Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Mac OS X, when Safari is used, allows attackers to obtain sensitive information via unknown vectors.
network
adobe apple
4.3
2010-10-26 CVE-2010-2886 Cross-Site Scripting vulnerability in Adobe Robohelp and Robohelp Server
Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
adobe CWE-79
4.3
2010-10-26 CVE-2010-2885 Cross-Site Scripting vulnerability in Adobe Robohelp and Robohelp Server
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word.
network
adobe CWE-79
4.3