Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe ColdFusion. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Application Server endpoint, which listens on TCP port 8500 by default. The...

Adobe ColdFusion ODBC Server Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe ColdFusion. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of GIOP packets. The issue results from the lack of proper validation of...

CVE-2022-38423: Improper Limitation of a Pathname to a Restricted Directory

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction, but doe...

Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe ColdFusion. Authentication is required to exploit this vulnerability. The specific flaw exists within the Application Server endpoint, which listens on TCP port 8500 by default. The issue resul...

Adobe ColdFusion has unspecified vulnerabilities

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has a security vulnerability that could be...

Adobe ColdFusion Heap-based Buffer Overflow (APSB22-44: CVE-2022-35712)

A buffer overflow vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe ColdFusion Remote Code Execution (APSB22-44: CVE-2022-38421)

A remote code execution vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe ColdFusion < 2018.x < 2018u15 / 2021.x < 2021u5 Multiple Vulnerabilities (APSB22-44)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 15 or 2021.x update 5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-44 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code executi...

Adobe ColdFusion Improper Input Validation (APSB22-44: CVE-2022-42340)

An improper input validation vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe ColdFusion Information Disclosure (APSB22-44: CVE-2022-38422)

An information disclosure vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Adobe ColdFusion Denial Of Service (APSB22-44: CVE-2022-35690)

A denial of service vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Adobe ColdFusion Improper Access to a Restricted Directory (APSB22-44: CVE-2022-38418)

An improper access to a restricted directory vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe ColdFusion Authentication Bypass (APSB22-44: CVE-2022-38420)

An authentication bypass vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage the user's system...

Adobe ColdFusion Directory Traversal (APSB22-44: CVE-2022-38423)

A directory traversal vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...

Adobe ColdFusion Credentials Disclosure (APSB22-44: CVE-2022-38419)

A credentials disclosure vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe ColdFusion Stack-based Buffer Overflow (APSB22-44: CVE-2022-35710)

A buffer overflow vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe ColdFusion Heap-based Buffer Overflow (APSB22-44: CVE-2022-35711)

A buffer overflow vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe ColdFusion Arbitrary File Read And Deletion (APSB22-44: CVE-2022-38424)

A arbitrary file read and deletion vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe ColdFusion Improper Restriction of XML External Entity (APSB22-44: CVE-2022-42341)

An Improper Restriction of XML External Entity vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe ColdFusion 缓冲区错误漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has a security vulnerability that could be...