CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 18/01/2019 |
| CVE-2018-12805 | 严重9.8 | Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation. | 20/07/2018 |
| CVE-2018-12804 | 严重9.8 | Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking. | 20/07/2018 |
| CVE-2018-4994 | 高危7.5 | Adobe Connect versions 9.7.5 and earlier have an exploitable Authentication Bypass vulnerability. Successful exploitation could lead to sensitive information disclosure. | 19/05/2018 |
| CVE-2018-4923 | 严重9.1 | Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion. | 19/05/2018 |
| CVE-2018-4921 | 中危6.1 | Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure. | 19/05/2018 |
| CVE-2017-11291 | 严重10.0 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls. | 09/12/2017 |
| CVE-2017-11290 | 中危6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by adding a feature that enables Connect administrators to protect users from UI redressing (or clickjacking) attacks. | 09/12/2017 |
| CVE-2017-11289 | 中危6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-11288 | 中危6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-11287 | 中危6.1 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure. | 09/12/2017 |
| CVE-2017-3103 | 中危6.1 | Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to a stored cross-site scripting attack. | 17/07/2017 |
| CVE-2017-3102 | 中危6.1 | Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation could lead to a reflected cross-site scripting attack. | 17/07/2017 |
| CVE-2017-3101 | 高危7.5 | Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clickjacking attack. | 17/07/2017 |
| CVE-2016-7851 | 中危6.1 | Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks. | 08/11/2016 |
| CVE-2016-4118 | 高危7.8 | Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors. | 30/05/2016 |
| CVE-2016-0950 | 中危5.3 | Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors. | 10/02/2016 |
| CVE-2016-0949 | 严重9.8 | Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL. | 10/02/2016 |