CVE-2019-7091: Deserialization of Untrusted Data

ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

ColdFusion FlashGateway deserialization vulnerability analysis-vulnerability warning-the black bar safety net

2019 2 May 12, the official Adobe released for Adobe ColdFusion security update patch, numbered APSB19 to 10. But for the vulnerability analysis, the current online I just saw an article that https://paper.seebug.org/811/, although the article did not give too many details for our Munchkin, but...

Adobe Releases Patches for Critical Flaws in Photoshop CC and Digital Edition

Adobe users would feel lighter this month, as Adobe has released patches for just two security vulnerability in its March Security Update. The company today released its monthly security updates to address two critical arbitrary code execution vulnerabilities—one in Adobe Photoshop CC and another...

Adobe Patches Critical Photoshop, Digital Edition Flaws

Adobe on Tuesday released its March Security Update, reporting and fixing only two critical flaws: one in Photoshop CC and one in Adobe Digital Editions. Both critical flaws could allow a bad actor to achieve arbitrary code execution in the context of the current user, Adobe said. The company sai...

Adobe ColdFusion CVE-2019-7816 Arbitrary File Upload

Description Adobe ColdFusion is prone to an arbitrary file-upload vulnerability. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application. The following versions are affecte...

Adobe ColdFusion Arbitrary File Upload Vulnerability (CNVD-2018-18733)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. An arbitrary file upload vulnerability exists in Adobe ColdFusion. An attacker could exploit this issue...

Adobe Patches Critical ColdFusion Vulnerability With Active Exploit

Adobe has issued an emergency patch for a critical vulnerability in its ColdFusion service that is being exploited in the wild. The vulnerability, CVE-2019-7816, exists in Adobe’s commercial rapid web application development platform, ColdFusion. The ColdFusion vulnerability is a file upload...

Adobe Releases Security Updates for ColdFusion

Adobe has released security updates to address a vulnerability in ColdFusion. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

VulnCheck KEV: CVE-2019-7816

ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

Adobe ColdFusion < 11.x < 11u18 / 2016.x < 2016u10 / 2018.x < 2018u3 Vulnerability (APSB19-14)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 11.x update 18, 2016.x update 10, or 2018.x update 3. It is, therefore, affected by a vulnerability as referenced in the APSB19-14 advisory. - File Upload Restriction Bypass potentially leading to Arbitrary code...

Adobe ColdFusion < 11.x < 11u16 / 2016.x < 2016u8 / 2018.x < 2018u2 Multiple Vulnerabilities (APSB19-10)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 11.x update 16, 2016.x update 8, or 2018.x update 2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-10 advisory. - Deserialization of untrusted data potentially leading to Arbitrar...

Adobe ColdFusion Multiple Vulnerabilities (APSB19-10)

Adobe ColdFusion is prone to code execution and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

February 2019 Patch Tuesday – 74 Vulns, 20 Critical, Exchange 0-day, Adobe Vulns

This month's Patch Tuesday is very large, with 74 vulns being addressed of which 20 are labeled as critical. Fifteen of these critical vulns are in the Scripting Engine and browsers, with the remainder being GDI+, SharePoint, and DHCP. Microsoft also issued an Advisory for an Exchange 0-day, alon...

Adobe Releases February 2019 Patch Updates For 75 Vulnerabilities

Welcome back! Adobe has today released its monthly security updates to address a total of 75 security vulnerabilities across its various products, 71 of which resides in Adobe Acrobat and Reader alone. February 2019 patch Tuesday updates address several critical and important vulnerabilities in...

Adobe Releases February 2019 Patch Updates For 75 Vulnerabilities

Welcome back! Adobe has today released its monthly security updates to address a total of 75 security vulnerabilities across its various products, 71 of which resides in Adobe Acrobat and Reader alone. February 2019 patch Tuesday updates address several critical and important vulnerabilities in...

Adobe Fixes 43 Critical Acrobat and Reader Flaws

Adobe issued patches for 43 critical vulnerabilities in Acrobat and Reader – including a fix for a zero-day flaw that researchers at 0patch temporarily fixed on Monday. That bug could enable bad actors to steal victims’ hashed password values. Overall, Adobe patched 75 important and critical...

PT-2019-1584

Name of the Vulnerable Software and Affected Versions ColdFusion versions Update 1 and earlier ColdFusion versions Update 7 and earlier ColdFusion versions Update 15 and earlier Description The issue is related to the deserialization of untrusted data, which can be exploited by a remote attacker ...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities affecting Adobe Flash Player, Acrobat and Reader, ColdFusion, and Creative Cloud Desktop Application. An attacker could exploit some of these vulnerabilities to take control of an affected system. The National Cybersecurity and...

PT-2019-5573

Name of the Vulnerable Software and Affected Versions ColdFusion versions Update 1 and earlier ColdFusion versions Update 7 and earlier ColdFusion versions Update 15 and earlier Description The issue is related to the lack of protection of the web page structure in the ColdFusion interpreter...

APSB19-10 Security update available for ColdFusion

Adobe has released security updates for ColdFusion versions 2018, 2016 and 11. These updates resolve critical and important vulnerabilities that could lead to arbitrary code execution...