Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. Adobe ColdFusion is vulnerable to a path traversal vulnerability that could be exploited to cause arbitrary file system writes...

Adobe ColdFusion 缓冲区错误漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has a security vulnerability that could be...

Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion contains a path traversal vulnerability, which...

Adobe ColdFusion 缓冲区错误漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. Adobe ColdFusion is vulnerable to buffer overflow, which can be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe ColdFusion 缓冲区错误漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and a scripting language. Adobe ColdFusion has a security vulnerability. An attacker can exploit the vulnerability to execute...

Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. Adobe ColdFusion is vulnerable to a path traversal vulnerability, which stems from an improper restriction of pathnames to restricted directories,...

Adobe ColdFusion 信任管理问题漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. The platform includes an integrated development environment and scripting language.Adobe ColdFusion has a trust management issue vulnerability that...

PT-2022-6419 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions Update 14 and earlier Adobe ColdFusion versions Update 4 and earlier Description: The issue is related to an improper restriction of XML external entity references, which could allow a remote attacker to disclose...

PT-2022-6429

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier Description The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does no...

PT-2022-6428

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier Description The issue is related to an improper limitation of a pathname to a restricted directory, which could result in information disclosure. Exploitation of this iss...

PT-2022-6150 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions Update 14 and earlier Adobe ColdFusion versions Update 4 and earlier Description: The issue is related to a buffer overflow when handling GIOP packets, which could allow a remote attacker to execute arbitrary code or...

PT-2022-6424

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions Update 14 and earlier Adobe ColdFusion versions Update 4 and earlier Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability...

PT-2022-6420 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions Update 14 and earlier Adobe ColdFusion versions Update 4 and earlier Description: The issue exists due to improper limitation of a pathname to a restricted directory, allowing a remote attacker to execute arbitrary...

PT-2022-6427

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier Description The issue is related to a Stack-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2022-6425

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as a path traversal vulnerability. This could result in...

PT-2022-6426 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions Update 14 and earlier Adobe ColdFusion versions Update 4 and earlier Description: The issue is related to an improper restriction of XML external entity references. This could allow a remote attacker to gain...

APSB22-44: Security updates available for ColdFusion

Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve Critical, Important and Moderate vulnerabilities that could lead to arbitrary code execution, arbitrary file system write, security feature bypass and privilege escalation...

ColdFusio administrator.cfc Bypass Code Execution

The vulnerability of the administrator.cfc component in the ColdFusion software interface is related to insufficient protection of sensitive data. Exploiting this vulnerability allows an attacker to bypass security restrictions or execute arbitrary code...

Adobe ColdFusion 2018.x < 2018 Update 14 / 2021.x < 2021 Update 4 XSS (APSB22-22)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 14 or 2021.x update 4. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote...

CVE-2022-28818

ColdFusion versions CF2021U3 and earlier and CF2018U13 are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's...