VulnCheck KEV: CVE-2009-3960

Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure...

Adobe ColdFusion Multiple Vulnerabilities (APSB21-75)

Adobe ColdFusion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion"; if...

Adobe ColdFusion 2018.x < 2018 Update 12 / 2021.x < 2021 Update 2 Multiple Vulnerabilities (APSB21-75)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 12 or 2021.x update 2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-75 advisory including the following: - A vulnerability exists in Adobe Coldfusion due to the usa...

Adobe Snuffs Critical Bugs in Acrobat, Experience Manager

Adobe is urging its throngs of Acrobat Reader users to update their software to fix critical vulnerabilities that could allow adversaries to execute arbitrary code on unpatched versions. The warnings are part of the firm’s September monthly security update, which this month addresses 59 bugs foun...

PT-2021-5083 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2021 update 1 and earlier ColdFusion versions 2018.10 and earlier Description: The issue is related to improper access control in ColdFusion, specifically when checking permissions in the CFIDE path. This could allow an...

Adobe ColdFusion 访问控制错误漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and a scripting language. An Access Control Error vulnerability exists in Adobe ColdFusion, which stems from a security flaw in...

PT-2021-4819 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2021 update 1 and earlier and versions 2018.10 and earlier Description: The issue is related to the use of inherently dangerous functions, which can lead to a security feature bypass. An authenticated attacker could levera...

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and a scripting language. A security vulnerability exists in Adobe ColdFusion, which stems from A security vulnerability exists...

APSB21-75 Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve multiple critical vulnerabilities that could lead to security feature bypass...

ColdFusion Deserialization RCE

The vulnerability of the ColdFusion software platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

ColdFusion DoS

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ColdFusion Privilege Escalation

The vulnerability of the ColdFusion software platform is related to incorrect handling of the path for accessing DLL libraries. Exploiting this vulnerability can allow an attacker to increase their privileges...

ColdFusion Access Control File System Access

The vulnerability of the Access Control component in the ColdFusion software platform is related to deficiencies in access control management. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the file system...

ColdFusion Information Disclosure

The vulnerability of the ColdFusion software platform is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ColdFusion Code Execution

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ColdFusion Unrestricted File Execution

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ColdFusion Privilege Escalation

The vulnerability of the ColdFusion software platform is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

Exploit for Unrestricted Upload of File with Dangerous Type in Adobe Coldfusion

CVE-2018-15961 - Adobe ColdFusion 2018 RCE This repository co...

Adobe ColdFusion 8 - Remote Command Execution Exploit

Exploit Title: Adobe ColdFusion 8 - Remote Command Execution RCE Google Dork: intext:"adobe coldfusion 8" Exploit Author: Pergyz Vendor Homepage: https://www.adobe.com/sea/products/coldfusion-family.html Version: 8 Tested on: Microsoft Windows Server 2008 R2 Standard CVE : CVE-2009-2265...

Adobe ColdFusion 8 Remote Command Execution

Exploit Title: Adobe ColdFusion 8 - Remote Command Execution RCE Google Dork: intext:"adobe coldfusion 8" Date: 24/06/2021 Exploit Author: Pergyz Vendor Homepage: https://www.adobe.com/sea/products/coldfusion-family.html Version: 8 Tested on: Microsoft Windows Server 2008 R2 Standard CVE :...