2911 matches found
CVE-2013-0629
CVE-2013-0629 is an Adobe ColdFusion directory traversal vulnerability affecting ColdFusion 9.0, 9.0.1, 9.0.2, and 10 when a password is not configured. It allows an attacker to access restricted directories via unspecified vectors and was exploited in the wild in January 2013. Connected sources ...
CVE-2013-0631
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013...
PT-2013-2484 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 9.0 through 9.0.2 Description: The issue allows attackers to obtain sensitive information via unspecified vectors. It has been exploited in the wild, with incidents reported in January 2013. Recommendations: For Adob...
PT-2013-2479 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 9.0 through 9.0.2 Description: The issue allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors when a password is not configured. This has been exploited in the...
CVE-2013-0631
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
PT-2013-2482 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 9.0 through 10 Description: The issue allows attackers to access restricted directories via unspecified vectors when a password is not configured. This has been exploited in the wild. Recommendations: For Adobe...
CVE-2013-0629
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
VulnCheck KEV: CVE-2013-0629
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories...
CVE-2013-0625
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value...
VulnCheck KEV: CVE-2013-0631
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server...
Adobe ColdFusion 验证绕过漏洞(CVE-2013-0625)
CVE ID:CVE-2013-0625 Adobe ColdFusion是一款高效的网络应用服务器开发环境 Windows, Macintosh和UNIX下的Adobe ColdFusion存在一个安全漏洞，允许未授权用户远程绕过验证控制，控制受影响的服务器。 此漏洞仅影响没有启用密码保护或没有设置密码的ColdFusion客户 0 Adobe ColdFusion 10 Adobe ColdFusion 9.0.2 Adobe ColdFusion 9.0.1 Adobe ColdFusion 9.0 厂商解决方案...
VulnCheck KEV: CVE-2013-0625
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access...
Adobe Patches Acrobat, Reader and Flash Flaws
Adobe has not only joined Microsoft on the Patch Tuesday parade, but it too has critical vulnerabilities being exploited in the wild while a security update is in the works. Two patches were released today for Acrobat/Reader and Flash Player, yet the company has said that fixes for three ColdFusi...
Adobe ColdFusion Exploits in Wild; Patch Remains Week Away
Adobe is recommending ColdFusion users apply a series of mitigations to counter active exploits against vulnerabilities in the application server. An advisory was released late Friday night that the trio of flaws are being targeted by attackers, and that the company would not have a patch availab...
Adobe to Patch Reader, Acrobat; Warns of ColdFusion Exploit
Adobe will release a round of patches on Tuesday for its Reader and Acrobat products, and also has issued a separate advisory that it is working on a update for a vulnerability in ColdFusion that the company said is currently being exploited. “We are currently evaluating the reports and plan to...
PT-2013-1353 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 9.0 through 10 Description: The issue is related to the administrator.cfc component in Adobe ColdFusion, which allows remote attackers to bypass authentication and possibly execute arbitrary code. This is achieved by...
Coldfusion 8 RDS Authentication Bypass
Exploit for php platform in category remote exploits This is private exploit. You can buy it at https://0day.today...
CVE-2012-5675
Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via unspecified vectors...
