Search vulnerabilities

Results 425,948

CVE-2020-9648

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

CVSS 3.1 · 6.1 Medium EPSS 2.5% KEV · Not listed
Vendors
CVE-2020-9647

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (dom-based) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

CVSS 3.1 · 6.1 Medium EPSS 2.5% KEV · Not listed
Vendors
CVE-2020-9646

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 3.2% KEV · Not listed
Vendors
Products
CVE-2020-9645

Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
CVE-2020-9644

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting (stored) vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser.

CVSS 3.1 · 5.4 Medium EPSS 1.8% KEV · Not listed
Vendors
CVE-2020-9643

Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
CVE-2020-9642

Adobe Illustrator versions 24.1.2 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Products
CVE-2020-9641

Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2020-9640

Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.6% KEV · Not listed
Vendors
Products
CVE-2020-9639

Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.6% KEV · Not listed
Vendors
Products
CVE-2020-9638

Adobe After Effects versions 17.1 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 8.9% KEV · Not listed
Vendors
CVE-2020-9637

Adobe After Effects versions 17.1 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 8.7% KEV · Not listed
Vendors
CVE-2020-9636

Adobe Framemaker versions 2019.0.5 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 4.0% KEV · Not listed
Vendors
Products
CVE-2020-9635

Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 4.6% KEV · Not listed
Vendors
Products
CVE-2020-9634

Adobe Framemaker versions 2019.0.5 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 4.6% KEV · Not listed
Vendors
Products
CVE-2020-9633

flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30)

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 7.7% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2020-9632

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 7.6% KEV · Not listed
Vendors
Products
CVE-2020-9631

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 7.6% KEV · Not listed
Vendors
Products
CVE-2020-9630

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error vulnerability. Successful exploitation could lead to privilege escalation.

CVSS 3.1 · 9.8 Critical EPSS 4.1% KEV · Not listed
Vendors
Products