CVE-2012-2048

CVE-2012-2048 affects Adobe ColdFusion 10 and earlier. The vulnerability is described as an unspecified denial of service caused by unknown vectors, with impact listed as partial availability loss. The available Connected documents do not detail the exact root cause or exploit vectors. Remediatio...

CVE-2012-2048

Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors...

Adobe ColdFusion远程拒绝服务漏洞

BUGTRAQ ID: 55499 CVE ID: CVE-2012-2048 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion v10及之前版本存在远程拒绝服务漏洞，攻击者可利用此漏洞使受影响应用崩溃，执行任意代码。 0 Adobe ColdFusion 9.x Adobe ColdFusion 8.x Adobe ColdFusion 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb12-21）以及相应补丁: apsb12-21：Security update: Hotfix available f...

Adobe ColdFusion HTTP Response Splitting (APSB12-15)

The version of Adobe ColdFusion running on the remote host is affected by an HTTP response splitting vulnerability. The coldfusion.filter.ComponentFilter class does not properly sanitize input used in the Location header of an HTTP response. A remote attacker can exploit this by tricking a user...

Adobe ColdFusion HTTP响应分离漏洞

CVE ID: CVE-2012-2041 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion 8.0至9.0.1版本没有正确过滤某些输入即返回给用户，在实现上存在CRLF注入漏洞，可被利用插入任意HTTP标头，并执行HTTP响应分离攻击。 0 Adobe ColdFusion 9.x Adobe ColdFusion 8.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb12-15）以及相应补丁: apsb12-15：Security update: Hotfix available for ColdFusio...

CVE-2012-2041

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Crlf injection

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2012-2041

CVE-2012-2041 describes a CRLF injection in the Component Browser of Adobe ColdFusion 8.0–9.0.1 , enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Public references point to Adobe’s APSB12-15 security bulletin, which provided ...

CVE-2012-2041

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Adobe ColdFusion Hash Collision DoS (APSB12-06) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by a hash collision denial of service. A flaw exists in the way ColdFusion generates hash tables for user-supplied values. By sending a small number of specially crafted requests to a web server that uses ColdFusion, an...

Adobe Coldfusion Solr Service Information Disclosure

Adobe ColdFusion Solr Service Information Disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CVE-2012-0770

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2012-0770

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

Adobe ColdFusion XSS Vulnerabilities (APSB11-29) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by multiple cross-site scripting vulnerabilities. Successful exploitation of these issues may allow an attacker to execute malicious script code in a user's browser within the context of the affected website. C Tenable...

CVE-2011-4368

Cross-site scripting XSS vulnerability in Remote Development Services RDS in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2463

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the cfform tag...

Cross site scripting

Cross-site scripting XSS vulnerability in Remote Development Services RDS in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2463

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the cfform tag...

CVE-2011-4368

Cross-site scripting XSS vulnerability in Remote Development Services RDS in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4368

CVE-2011-4368 concerns an XSS flaw in Adobe ColdFusion’s Remote Development Services (RDS) affecting ColdFusion 8.0–9.0.1. The vulnerability enables remote attackers to inject arbitrary script/HTML in victims’ browsers, via unspecified vectors, within the context of the affected web application. ...