1624 matches found
EUVD-2026-44553
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-48324
CVE-2026-48324 : ColdFusion is affected by an SQL Injection vulnerability (Improper Neutralization of Special Elements used in an SQL Command) that could lead to arbitrary code execution in the context of the current user. Exploitation does not require user interaction, and the scope is reported ...
CVE-2026-48327 ColdFusion | Incorrect Authorization (CWE-863)
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-48327
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...
EUVD-2026-44550
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-48327
Technical details about CVE-2026-48327 are not publicly available in the provided documents. Monitor for updates from Adobe/NVD for affected versions, impact, and remediation.
CVE-2026-48322
Technical details (affected product/version, root cause specifics, impact, mitigations) are not publicly available in the provided documents. Monitor for updates.
EUVD-2026-44544
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-48284 ColdFusion | Improper Input Validation (CWE-20)
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction...
EUVD-2026-44545
ColdFusion is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...
EUVD-2026-44542
ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-48325
Affected product: ColdFusion. Vulnerability: Missing Authentication for Critical Function that could allow arbitrary code execution in the context of the current user without user interaction. Impact stated as CRITICAL (CVSS 3.1: AV Adjacent, AC Low, PR None, UI None; Scope Changed; CHANGED). Lik...
CVE-2026-48311
CVE-2026-48311 affects Adobe Bridge. The vulnerability is an out-of-bounds write (CWE-787) in Bridge that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The provided documents do not specify a...
CVE-2026-48341 Bridge | Out-of-bounds Write (CWE-787)
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48342
CVE-2026-48342 affects Bridge. It is an Integer Overflow or Wraparound vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents provide the vulnerable componen...
CVE-2026-48272
CVE-2026-48272 affects Creative Cloud Desktop and involves an Uncontrolled Search Path Element (CWE-427) that could lead to arbitrary code execution in the context of the current user. Exploitation is local, does not require user interaction, and the attack surface is constrained by the patch/sco...
CVE-2026-48349
Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed...
UBUNTU-CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-48345 Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Animate is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...
CVE-2026-48349 Animate | Incorrect Authorization (CWE-863)
Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed...