|
248871
|
7.5 |
HIGH
Network
|
adobe
|
experience_manager
|
Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability.
|
CWE-200
Information Exposure
|
CVE-2017-3110
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248872
|
9.8 |
CRITICAL
Network
|
adobe
|
experience_manager
|
Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2017-3108
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248873
|
7.5 |
HIGH
Network
|
adobe
|
experience_manager
|
Adobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability.
|
CWE-200
Information Exposure
|
CVE-2017-3107
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248874
|
8.8 |
HIGH
Network
|
redhat adobe
|
enterprise_linux enterprise_linux_desktop enterprise_linux_workstation flash_player_desktop_runtime flash_player
|
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
|
CWE-704
Incorrect Type Conversion or Cast
|
CVE-2017-3106
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248875
|
7.5 |
HIGH
Network
|
adobe
|
digital_editions
|
Adobe Digital Editions 4.5.4 and earlier versions 4.5.4 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-3091
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248876
|
7.4 |
HIGH
Network
|
adobe redhat
|
flash_player_desktop_runtime flash_player enterprise_linux enterprise_linux_desktop enterprise_linux_workstation
|
Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.
|
CWE-601
Open Redirect
|
CVE-2017-3085
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248877
|
8.8 |
HIGH
Network
|
adobe
|
acrobat acrobat_dc acrobat_reader_dc reader
|
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability. Successful exploit…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-3016
|
2024-11-21 12:24 |
2017-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248878
|
7.5 |
HIGH
Network
|
fortinet
|
fortios
|
An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.
|
CWE-200
Information Exposure
|
CVE-2017-3130
|
2024-11-21 12:24 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248879
|
7.5 |
HIGH
Network
|
apache
|
cxf
|
The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signature comparison algorithm which may be exploited by sophisti…
|
NVD-CWE-noinfo
|
CVE-2017-3156
|
2024-11-21 12:24 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248880
|
6.1 |
MEDIUM
Network
|
adobe
|
connect
|
Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack.
|
CWE-79
Cross-site Scripting
|
CVE-2017-3103
|
2024-11-21 12:24 |
2017-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|