Design/Logic Flaw

Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors...

CVE-2014-0572

CVE-2014-0572 affects Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2. The issue is a security permissions problem that allows a local, unauthenticated user to bypass IP-based access restrictions. Connected sources ...

CVE-2014-0571

Cross-site scripting XSS vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0570

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-0570

CVE-2014-0570 is a Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 that allows remote attackers to hijack the authentication of unspecified victims via unknown vect...

CVE-2014-0572

Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors...

CVE-2014-0571

CVE-2014-0571 is a cross-site scripting (XSS) vulnerability in Adobe ColdFusion . The affected releases are: ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2. Attackers can exploit unspecified vectors to inject arbitrary w...

Adobe ColdFusion Multiple Vulnerabilities (APSB14-23) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by the following vulnerabilities : - An unspecified cross-site request forgery vulnerability exists because ColdFusion does not properly sanitize user-supplied input. CVE-2014-0570 - An unspecified cross-site scripting...

PT-2014-3679

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0 through 9.0 before Update 13 Adobe ColdFusion versions 9.0.1 through 9.0.1 before Update 12 Adobe ColdFusion versions 9.0.2 through 9.0.2 before Update 7 Adobe ColdFusion versions 10 through 10 before Update 14...

PT-2014-3678

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion 9.0 before Update 13 Adobe ColdFusion 9.0.1 before Update 12 Adobe ColdFusion 9.0.2 before Update 7 Adobe ColdFusion 10 before Update 14 Adobe ColdFusion 11 before Update 2 Description A cross-site scripting XSS issue allows...

PT-2014-3677

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion version 9.0 before Update 13 Adobe ColdFusion version 9.0.1 before Update 12 Adobe ColdFusion version 9.0.2 before Update 7 Adobe ColdFusion version 10 before Update 14 Adobe ColdFusion version 11 before Update 2 Description A...

CVE-2014-0570: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-0571: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0572: Undefined Security Weakness

Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors...

Adobe Releases Security Updates for ColdFusion and Flash Player

Adobe has released security updates to address multiple vulnerabilities in ColdFusion and Flash Player. Exploitation could allow attackers to take control of a vulnerable system. Users and administrators are encouraged to review Adobe Security Bulletins APSB 14-23 and APSB 14-22 and apply the...

CVE-2014-5315

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5315

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5315

CVE-2014-5315 affects Adobe products via an XSS in the Help page. Affected: Adobe Acrobat <= 9.5.2 (Mac/Windows) and Adobe ColdFusion

PT-2014-6399

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions 9.5.2 and earlier ColdFusion versions 8.0.1 and earlier Description A cross-site scripting XSS issue exists in the Help page of the affected software, allowing remote attackers to inject arbitrary web script or HTML...