612 matches found
EUVD-2025-202349
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could leverage this vulnerability to bypass security measures and execute...
CVE-2025-61823
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. A high privileged attacker could exploit this vulnerability to access sensitive files and data on th...
CVE-2025-61812
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction...
CVE-2025-64898
Adobe ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could allow limited unauthorized write access without user interaction. The CVE-2025-64898 entry is corroborated by multiple sources and advisories in the conn...
CVE-2025-61809
Adobe ColdFusion remote vulnerability CVE-2025-61809 arises from Improper Input Validation affecting ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier. The issue could bypass security checks and allow unauthorized read and write access without user interaction, with exploitation described ...
EUVD-2025-179683
Malicious code in cold-hot-beta-log-daemon npm...
EUVD-2025-179688
Malicious code in code-interpret-finally-decode-cold npm...
EUVD-2025-176374
Malicious code in simple-load-info-error-cold npm...
EUVD-2025-178432
Malicious code in index-error-cold-earth-encode npm...
EUVD-2025-179684
Malicious code in cold-dog-module-notify-good npm...
EUVD-2025-175988
Malicious code in test-sigma-reject-daemon-cold npm...
EUVD-2025-177462
Malicious code in omicron-query-air-cold-kappa npm...
EUVD-2025-176754
Malicious code in refactor-psi-xml-cold-sed npm...
EUVD-2025-179680
Malicious code in cold-phi-cloud-cluster-private npm...
EUVD-2025-177184
Malicious code in pi-authenticate-cold-encrypt-alert npm...
MAL-2025-190478 Malicious code in zeta-cold-notify-fire-easy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77229f2590e999b50f84151be215aed98544f5d472493de435539a1fb1794260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179685
Malicious code in cold-cron-object-chi-export npm...
EUVD-2025-179682
Malicious code in cold-mock-daemon-hash-thread npm...