|
248021
|
7.4 |
HIGH
Network
|
adobe redhat
|
flash_player_desktop_runtime flash_player enterprise_linux enterprise_linux_desktop enterprise_linux_workstation
|
Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.
|
CWE-601
Open Redirect
|
CVE-2017-3085
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248022
|
8.8 |
HIGH
Network
|
adobe
|
acrobat acrobat_dc acrobat_reader_dc reader
|
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability. Successful exploit…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-3016
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248023
|
7.5 |
HIGH
Network
|
fortinet
|
fortios
|
An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.
|
CWE-200
Information Exposure
|
CVE-2017-3130
|
2024-11-21 12:24 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248024
|
7.5 |
HIGH
Network
|
apache
|
cxf
|
The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signature comparison algorithm which may be exploited by sophisti…
|
NVD-CWE-noinfo
|
CVE-2017-3156
|
2024-11-21 12:24 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248025
|
6.1 |
MEDIUM
Network
|
adobe
|
connect
|
Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack.
|
CWE-79
Cross-site Scripting
|
CVE-2017-3103
|
2024-11-21 12:24 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248026
|
6.1 |
MEDIUM
Network
|
adobe
|
connect
|
Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack.
|
CWE-79
Cross-site Scripting
|
CVE-2017-3102
|
2024-11-21 12:24 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248027
|
7.5 |
HIGH
Network
|
adobe
|
connect
|
Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack.
|
NVD-CWE-noinfo
|
CVE-2017-3101
|
2024-11-21 12:24 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248028
|
6.5 |
MEDIUM
Network
|
adobe
|
flash_player_desktop_runtime flash_player
|
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address di…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-3100
|
2024-11-21 12:24 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248029
|
8.8 |
HIGH
Network
|
adobe
|
flash_player_desktop_runtime flash_player
|
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code e…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-3099
|
2024-11-21 12:24 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248030
|
6.5 |
MEDIUM
Network
|
adobe
|
flash_player_desktop_runtime flash_player
|
Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosur…
|
NVD-CWE-noinfo
|
CVE-2017-3080
|
2024-11-21 12:24 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|