3690 matches found
ColdFusion Path Traversal
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ColdFusion Path Traversal
The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ColdFusion Buffer Overflow
The vulnerability of the ColdFusion software platform is related to overflowing buffers in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ColdFusion Stack Buffer Overflow
The vulnerability of the ColdFusion software platform arises from an overflow in the stack-based buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ColdFusion Path Traversal
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...
ColdFusion Unauthorized Access
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ColdFusion Path Traversal
The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ColdFusion Information Disclosure
The vulnerability of the ColdFusion software platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution...
PT-2023-1943
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018 Update 15 and earlier and 2021 Update 5 and earlier Description The issue is related to a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the curren...
PT-2023-1713
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018 Update 15 and earlier and 2021 Update 5 and earlier Description The vulnerability in Adobe ColdFusion is related to improper access control and deserialization of untrusted data, which could result in arbitrary...
VulnCheck KEV: CVE-2023-26360
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution...
CVE-2023-26359
Adobe ColdFusion versions 2018 Update 15 and earlier and 2021 Update 5 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Rece...
Adobe ColdFusion Unauthenticated Remote Code Execution
This module exploits a remote unauthenticated deserialization of untrusted data vulnerability in Adobe ColdFusion 2021 Update 5 and earlier as well as ColdFusion 2018 Update 15 and earlier, in order to gain remote code execution. Module Options msf use...
APSB23-25 : Security update available for Adobe ColdFusion
Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve critical and important vulnerabilities that could lead to arbitrary code execution and memory leak...
ColdFusion Buffer Overflow RCE
The vulnerability of the ColdFusion software platform is related to writing code outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted network package...
ColdFusion DoS
The vulnerability of the ColdFusion software platform is related to the use of pre-installed user credentials. Exploiting this vulnerability could allow an attacker to trigger a service failure...
ColdFusion Information Disclosure
The vulnerability of the ColdFusion software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the system...
ColdFusion Path Traversal
The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Lucee Authenticated Scheduled Job Code Execution Exploit
This Metasploit module can be used to execute a payload on Lucee servers that have an exposed administrative web interface. It's possible for an administrator to create a scheduled job that queries a remote ColdFusion file, which is then downloaded and executed when accessed. The payload is...