Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

3680 matches found

NVD
NVD•added 2018/05/19 5:29 p.m.•35 views

CVE-2018-4940

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure...

6.1CVSS5.7AI score0.01727EPSS
SaveExploits0References2
osv_cve
osv_cve•added 2018/05/19 5:29 p.m.•7 views

CVE-2018-4939

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution...

9.8CVSS7.5AI score0.61987EPSS
SaveExploits1References3
osv_cve
osv_cve•added 2018/05/19 5:29 p.m.•8 views

CVE-2018-4940

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure...

6.1CVSS5.8AI score0.01727EPSS
SaveExploits0References2
osv_cve
osv_cve•added 2018/05/19 5:29 p.m.•18 views

CVE-2018-4938

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation...

7.8CVSS5.8AI score0.00701EPSS
SaveExploits0References2
osv_cve
osv_cve•added 2018/05/19 5:29 p.m.•12 views

CVE-2018-4942

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure...

7.5CVSS5.8AI score0.03866EPSS
SaveExploits0References2
osv_cve
osv_cve•added 2018/05/19 5:29 p.m.•14 views

CVE-2018-4941

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure...

6.1CVSS5.8AI score0.01727EPSS
SaveExploits0References2
Prion
Prion•added 2018/05/19 5:29 p.m.•32 views

Cross site scripting

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure...

4.3CVSS6AI score0.01727EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2018/05/19 5:29 p.m.•32 views

Deserialization of untrusted data

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution...

10CVSS9.5AI score0.61987EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2018/05/19 5:29 p.m.•49 views

Privilege escalation

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation...

4.6CVSS8AI score0.00701EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2018/05/19 5:29 p.m.•42 views

Xxe

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure...

5CVSS7.5AI score0.03866EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2018/05/19 5:29 p.m.•26 views

Cross site scripting

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure...

4.3CVSS6AI score0.01727EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2018/05/19 5:00 p.m.•13 views

CVE-2018-4938

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation...

7.5AI score0.00701EPSS
SaveExploits0References2
CVE
CVE•added 2018/05/19 5:00 p.m.•74 views

CVE-2018-4941

CVE-2018-4941 affects Adobe ColdFusion 11.x before 11u14 and 2016.x before 2016u6, where an exploitable Cross-Site Scripting vulnerability could lead to information disclosure. The issue is a ColdFusion Web UI/XSS flaw; the root cause is an unsafe script handling path leading to information discl...

6.1CVSS6.8AI score0.01727EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2018/05/19 5:00 p.m.•50 views

CVE-2018-4939

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution...

9.7AI score0.61987EPSS
SaveExploits1References2
CVE
CVE•added 2018/05/19 5:00 p.m.•1027 views

CVE-2018-4939

Adobe ColdFusion is affected by CVE-2018-4939 due to a Deserialization of Untrusted Data vulnerability in Update 5 and earlier (and ColdFusion 11 Update 13 and earlier). The issue arises from insecure deserialization in the DataServicesCFProxy/integration flow, enabling arbitrary code execution u...

10CVSS9.5AI score0.61987EPSS
SaveIn wildExploits1References3Affected Software1
Cvelist
Cvelist•added 2018/05/19 5:00 p.m.•40 views

CVE-2018-4940

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure...

7AI score0.01727EPSS
SaveExploits0References2
CVE
CVE•added 2018/05/19 5:00 p.m.•72 views

CVE-2018-4940

Adobe ColdFusion 11.x prior to 11u14 and 2016.x prior to 2016u6 are affected by CVE-2018-4940, a cross-site scripting vulnerability that could lead to information disclosure. Root cause is an exploitable XSS in Update 5 and earlier ColdFusion versions. Mitigation: apply ColdFusion 11u14 or 2016u6...

6.1CVSS6.8AI score0.01727EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2018/05/19 5:00 p.m.•84 views

CVE-2018-4942

Adobe ColdFusion is affected by CVE-2018-4942 (Unsafe XML External Entity Processing) causing information disclosure. Affected: ColdFusion 5 and earlier; ColdFusion 11 Update 13 and earlier. Root cause: insecure XML parsing/XE. Mitigation: apply updates later than Update 5 (CF 5 and earlier) or l...

7.5CVSS8.1AI score0.03866EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2018/05/19 5:00 p.m.•12 views

CVE-2018-4939

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution...

9.6AI score0.61987EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2018/05/19 5:00 p.m.•52 views

CVE-2018-4938

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation...

8.6AI score0.00701EPSS
SaveExploits0References2
Rows per page
Query Builder