3897 matches found
CVE-2025-49536
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of...
CVE-2025-49535 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access sensitive information or denial of service b...
CVE-2025-49535
CVE-2025-49535 describes an XXE vulnerability in Adobe ColdFusion for versions 2025.2, 2023.14, 2021.20 and earlier. The issue is an improper restriction of XML External Entity references, which could allow an attacker to access sensitive information or cause denial of service. Exploitation requi...
CVE-2025-49536
The CVE-2025-49536 issue affects Adobe ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier and is an Incorrect Authorization vulnerability that can bypass security features. A low-privileged attacker could bypass security checks and gain unauthorized access without user interaction, with exp...
CVE-2025-49536 ColdFusion | Incorrect Authorization (CWE-863)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of...
CVE-2025-49539 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to access sensitive information...
CVE-2025-49539
CVE-2025-49539 concerns Adobe ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier affected by an XML External Entity (XXE) vulnerability that can bypass security features and leak sensitive information. The issue is caused by improper restriction of XML external entities, enabling a high-pri...
CVE-2025-48818
Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2025-49740 Windows SmartScreen Security Feature Bypass Vulnerability
...
CVE-2025-48818 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48814 Remote Desktop Licensing Service Security Feature Bypass Vulnerability
...
CVE-2025-48814 Remote Desktop Licensing Service Security Feature Bypass Vulnerability
...
CVE-2025-48804 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48800 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48800 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48003 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48001 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-48001 Windows BitLocker Security Feature Bypass Vulnerability
...