Lucene search
+L

147 matches found

NVD
NVD
•added 2026/10/13 9:19 p.m.•4 views

CVE-2026-90530

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

9.3CVSS0.00265EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/13 9:17 p.m.•3 views

CVE-2026-106616

ColdFusion is affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issu...

8.6CVSS0.00535EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 8:21 p.m.•10 views

CVE-2026-106616 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion is affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issu...

8.6CVSS0.00535EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 8:21 p.m.•13 views

CVE-2026-90530 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

9.3CVSS0.00265EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 8:21 p.m.•11 views

CVE-2026-90530

ColdFusion RDS is vulnerable to a path traversal vulnerability (CWE-22) due to improper limitation of pathnames to a restricted directory. This flaw could allow an attacker to perform arbitrary file system reads , accessing sensitive files and directories outside the intended scope. The vulnerabi...

9.3CVSS6AI score0.00265EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•8 views

Adobe Campaign Classic < 7.4.3 build 9398 Multiple Vulnerabilities (APSB26-114)

The version of Adobe Campaign Classic installed on the remote host is prior to 7.4.3 build 9398. It is, therefore, affected by multiple vulnerabilities: - An incorrect authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of thi...

10CVSS6.7AI score0.00859EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/22 7:16 p.m.•26 views

CVE-2026-34689

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

8.6CVSS0.00658EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 6:54 p.m.•32 views

CVE-2026-34689

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. This flaw could allow an attacker to perform an arbitrary file system read , gaining access to sensitive files and directories outside the intended access scope. Exploitatio...

8.6CVSS6AI score0.00658EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/22 6:54 p.m.•13 views

EUVD-2026-84785

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

8.6CVSS6AI score0.00658EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 6:54 p.m.•16 views

CVE-2026-34689 Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

8.6CVSS6AI score0.00658EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/22 6:54 p.m.•42 views

CVE-2026-34689 Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

8.6CVSS0.00658EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•10 views

CVE-2026-34689: Improper Limitation of a Pathname to a Restricted Directory

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

8.6CVSS6AI score0.00658EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•6 views

PT-2026-96968

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows for arbitrary file system read. This issue enables an attacker to access sensitive...

8.6CVSS5.9AI score0.00658EPSS
SaveExploits0References5
Adobe
Adobe
•added 2026/09/22 12:00 a.m.•65 views

APSB26-150 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, arbitrary file system read, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild for any ...

9.9CVSS8.2AI score0.00637EPSS
SaveExploits0Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-81994: Improperly Controlled Modification of Object Prototype Attributes

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

8.2CVSS7.6AI score0.006EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•5 views

CVE-2026-75998: Improper Access Control

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

7.5CVSS7.3AI score0.0082EPSS
SaveExploits0References3
Adobe
Adobe
•added 2026/09/08 12:00 a.m.•63 views

APSB26-141 : Security update available for Adobe Acrobat Reader

Adobe has released a security update for Adobe Acrobat and Reader for Windows and macOS. This update addresses critical, important, and moderate vulnerabilities that could result in arbitrary code execution, privilege escalation, arbitrary file system read, arbitrary file system write, memory...

8.8CVSS7.8AI score0.006EPSS
SaveExploits0Affected Software3
Mend
Mend
•added 2026/08/25 5:31 p.m.•8 views

CVE-2026-76198

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...

6.8CVSS6AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•7 views

CVE-2026-76198: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...

5.5CVSS6AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•4 views

CVE-2026-48442: Improper Limitation of a Pathname to a Restricted Directory

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read access to files or directories outside th...

7.1CVSS6.9AI score0.003EPSS
SaveExploits0References3
Rows per page
Query Builder