Adobe ColdFusion DLL Search Order Hijacking Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to elevate privileges...

Adobe ColdFusion Improper Access Control Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to gain access to the system file structure...

Adobe ColdFusion Insufficient Input Validation Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to cause a denial of service DoS...

April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion

This month’s Microsoft Patch Tuesday addresses 113 vulnerabilities with 19 of them labeled as Critical. The 19 Critical vulnerabilities cover Adobe Font Manager Library 0-day, SharePoint, Hyper-V, Scripting Engines, Media Foundation, Microsoft Graphics, Windows Codecs, and Dynamics Business...

Adobe Fixes 'Important' Flaws in ColdFusion, After Effects and Digital Editions

Adobe released security patches for vulnerabilities in its ColdFusion, After Effects and Digital Editions applications. If exploited, the flaws could enable attackers to view sensitive data, gain escalated privileges, and launch denial-of-service attacks. Each of the bugs were rated...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following...

APSB20-18 Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2016 and 2018. These updates resolve multiple important vulnerabilities that could lead to information disclosure, privilege escalation or a denial-of-service...

PT-2020-6357

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2016, 2018 Description The issue is related to insufficient input validation, which could lead to an application-level denial-of-service dos if successfully exploited. This means that a remote attacker might be able to caus...

PT-2020-6354

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2016 through 2018 Description The issue is related to incorrect handling of the path to DLL libraries, which can be exploited to potentially allow an attacker to escalate their privileges. Recommendations For ColdFusi...

PT-2020-6356

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2016 through 2018 Description The issue is related to improper access control in the Access Control component of the ColdFusion platform, which can be exploited by a remote attacker to gain unauthorized access to the...

CVE-2020-3794

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory...

CVE-2020-3761

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

CVE-2020-3761

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

Design/Logic Flaw

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

CVE-2020-3794

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory...

CVE-2020-3794

CVE-2020-3794 affects Adobe ColdFusion 2016 and 2018. The issue is a file inclusion vulnerability that could allow an attacker to execute arbitrary code by loading files located in the webroot or its subdirectories. Public advisories and vendor listings (NVD, Red Hat, CNVD, CVE records, and APSB2...

CVE-2020-3761

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

CVE-2020-3761

CVE-2020-3761 affects Adobe ColdFusion 2016 and 2018, enabling remote file read from the ColdFusion install directory (arbitrary file read). According to NVD, CVSSv3.1 base score 7.5 (HIGH), with network access and no authentication required (no user interaction). Remediation: patch/update per AP...

CVE-2020-3794: Inclusion of Functionality from Untrusted Control Sphere

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory...

ColdFusion PHP Function Execution

The vulnerability of the ColdFusion software platform relates to the names of PHP functions include or require. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code on the target system by sending a specially crafted HTTP request...