Search vulnerabilities

Results 16,509

CVE-2020-9569

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2020-9568

Adobe Bridge versions 10.0.1 and earlier version have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.7% KEV · Not listed
Vendors
Products
CVE-2020-9565

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2020-9564

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2020-9563

Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 5.3% KEV · Not listed
Vendors
Products
CVE-2020-9562

Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 5.4% KEV · Not listed
Vendors
Products
CVE-2020-9561

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2020-9560

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2020-9559

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2020-9556

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2020-9555

Adobe Bridge versions 10.0.1 and earlier version have a stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 5.3% KEV · Not listed
Vendors
Products
CVE-2020-9554

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Products
CVE-2020-3765

Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.6% KEV · Not listed
Vendors
CVE-2020-26208

Heap-buffer-overflow in jhead

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting in a program crash or potentially incorrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-10828

A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request.

CVSS 3.1 · 9.8 Critical EPSS 20.9% KEV · Not listed
Vendors
Products
CVE-2020-10827

A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request.

CVSS 3.1 · 9.8 Critical EPSS 20.9% KEV · Not listed
Vendors
Products
CVE-2020-10825

A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 3 of 3).

CVSS 3.1 · 9.8 Critical EPSS 4.1% KEV · Not listed
Vendors
Products
CVE-2020-10824

A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 2 of 3).

CVSS 3.1 · 9.8 Critical EPSS 4.1% KEV · Not listed
Vendors
Products
CVE-2020-10823

A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 1 of 3).

CVSS 3.1 · 9.8 Critical EPSS 4.4% KEV · Not listed
Vendors
Products