CVE-2020-9673

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2020-9673

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2020-9672

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2020-9672

CVE-2020-9672 affects Adobe ColdFusion 2016 (update 15 and earlier) and ColdFusion 2018 (update 9 and earlier). The issue is a DLL search-order hijacking vulnerability that could lead to privilege escalation. Public documentation references vendor advisories APSB20-43 and related patches; remedia...

Adobe ColdFusion DLL Search Order Hijacking Vulnerability (CNVD-2020-44849)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability. An attacker could exploit the vulnerability to elevate...

Adobe ColdFusion Code Issue Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A security vulnerability exists in Adobe ColdFusion 2016 Update 15 and earlier and ColdFusion 2018 Upda...

Adobe ColdFusion 2016.x < 2016u15 / 2018.x < 2018u9 Multiple Vulnerabilities (APSB20-18)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2016.x update 15 or 2018.x prior to update 9. It is, therefore, affected by the following vulnerabilities as referenced in the APSB20-18 advisory: - An application-level denial of service DoS vulnerability due to...

Adobe ColdFusion DLL Search Order Hijacking Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to elevate privileges...

Adobe ColdFusion Insufficient Input Validation Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to cause a denial of service DoS...

Adobe ColdFusion Improper Access Control Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to gain access to the system file structure...

April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion

This month’s Microsoft Patch Tuesday addresses 113 vulnerabilities with 19 of them labeled as Critical. The 19 Critical vulnerabilities cover Adobe Font Manager Library 0-day, SharePoint, Hyper-V, Scripting Engines, Media Foundation, Microsoft Graphics, Windows Codecs, and Dynamics Business...

Adobe ColdFusion 2016.x < 2016u14 / 2018.x < 2018u8 Multiple Vulnerabilities (APSB20-16)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2016.x update 14 or 2018.x update 8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-16 advisory. - Remote file read potentially leading to Arbitrary file read from the Coldfusion...

Adobe ColdFusion Remote File Read Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A remote file read vulnerability exists in Adobe ColdFusion. An attacker can use this vulnerability to read arbitrary files from the Coldfusion installation directory...

Adobe ColdFusion File Inclusion Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A file inclusion vulnerability exists in Adobe ColdFusion. An attacker can exploit this vulnerability to achieve arbitrary code execution of files located in the webroot or its subdirectories...

Adobe ColdFusion < 2018.x < 2018u7 Vulnerability (APSB19-58)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 7. It is, therefore, affected by a vulnerability as referenced in the APSB19-58 advisory. - Insecure inherited permissions of default installation directory potentially leading to Privilege Escalation...

Adobe ColdFusion Privilege Escalation Vulnerability (APSB19-58)

Adobe ColdFusion is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unspecified Vulnerability in Adobe ColdFusion

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. An unspecified vulnerability exists in Adobe ColdFusion. An attacker could exploit this vulnerability t...

Adobe ColdFusion CVE-2019-8256 Remote Privilege Escalation Vulnerability

Description Adobe ColdFusion is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Adobe ColdFusion 10 Adobe ColdFusion 10 Update 1 Adobe ColdFusion 10 Update 1...

Adobe ColdFusion Insecure Deserialization (CVE-2019-7091)

An insecure deserialization vulnerability exists in Adobe ColdFusion. This vulnerability is due to the lack of input validation of the JavaAdapter and JavaBeanAdapter classes. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

Adobe ColdFusion File Upload (APSB18-33) (CVE-2018-15961)

An arbitrary file upload vulnerability exists in Adobe ColdFusion due to insufficient validation in the filemanager plugin. An unauthenticated, remote attacker can exploit this, via a specially crafted POST request, to upload arbitrary files on the remote host. TRUSTED...