Lucene search
+L

2910 matches found

CNNVD
CNNVD
added 2025/05/13 12:0 a.m.7 views

Adobe ColdFusion 访问控制错误漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an Improper Access Control vulnerability that stems from the system failing to properly restrict access to the file system. No details of the vulnerability are...

9.1CVSS6.7AI score0.15287EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.9 views

PT-2025-21126 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This could lead to arbitrary file...

6.8CVSS6.3AI score0.55106EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.8 views

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an Improper Access Control vulnerability that stems from the system failing to properly restrict access to the file system. No details of the vulnerability are...

9.1CVSS6.7AI score0.15287EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.8 views

PT-2025-21123 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or...

9.8CVSS6AI score0.15287EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.6 views

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an improper authorization vulnerability that stems from the system failing to properly process authorization requests. An attacker could exploit the vulnerabili...

8.4CVSS7.3AI score0.15746EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.8 views

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an improper authorization vulnerability that stems from the system failing to properly process authorization requests. An attacker could use this vulnerability ...

9.1CVSS7.7AI score0.20559EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.8 views

PT-2025-21121 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an incorrect authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacke...

9.1CVSS7.1AI score0.20559EPSS
SaveExploits0References8
Adobe
Adobe
added 2025/05/13 12:0 a.m.28 views

APSB25-52 : Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolve critical, important and moderate vulnerabilities that could lead to arbitrary file system read, arbitrary code execution and privilege escalation...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.8 views

PT-2025-21125 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an incorrect authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker...

9CVSS6.9AI score0.15746EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.8 views

Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a path traversal vulnerability that originates from an improperly...

6.8CVSS6.4AI score0.55106EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.6 views

PT-2025-21120 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an improper input validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged...

9.1CVSS6.9AI score0.19427EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.5 views

PT-2025-21119

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged...

9.4CVSS6.3AI score0.01465EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.15 views

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data, which allows attackers to circumvent existing security restrictions.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created file...

6.8CVSS5.4AI score0.0079EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.14 views

The vulnerability of the ColdFusion software platform, which arises due to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the ColdFusion software platform exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

6.4CVSS5.2AI score0.14894EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.11 views

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data, which allows attackers to circumvent existing security restrictions.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created file...

6.8CVSS5.4AI score0.15746EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/04/18 12:0 a.m.11 views

Adobe ColdFusion Information Disclosure Vulnerability (CNVD-2025-07807)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an information disclosure vulnerability that can be exploited by attackers to caus...

5.5CVSS6.1AI score0.00225EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/18 12:0 a.m.17 views

Adobe ColdFusion OS Command Injection Vulnerability (CNVD-2025-07805)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an OS command injection vulnerability that arises from the application failing to...

8.2CVSS7.1AI score0.05266EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/18 12:0 a.m.12 views

Adobe ColdFusion Improper Access Control Vulnerability (CNVD-2025-07806)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability that can be exploited by attackers to cause a security...

8.2CVSS6.5AI score0.00308EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/14 12:0 a.m.45 views

Adobe ColdFusion Improper Input Validation Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from an improper input validation vulnerability that can be exploited by an...

9.1CVSS6.5AI score0.01591EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/14 12:0 a.m.14 views

Adobe ColdFusion Deserialization Vulnerability

Adobe ColdFusion is the United States of America Odo than Adobe company's set of rapid application development platform. Adobe ColdFusion suffers from a deserialization vulnerability, which occurs when the program lacks strict checksums when processing externally-entered serialized data. The...

9.1CVSS7.4AI score0.01891EPSS
SaveExploits0References1
Rows per page
Query Builder