Lucene search
+L

2639 matches found

RedhatCVE
RedhatCVE
added 2025/12/10 11:33 a.m.19 views

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

8.4CVSS6.5AI score0.00153EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/10 12:30 a.m.8 views

EUVD-2025-202347

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service...

5.6CVSS6.1AI score0.00127EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/10 12:30 a.m.8 views

EUVD-2025-202343

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or...

4.3CVSS6.3AI score0.00425EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/10 12:16 a.m.11 views

CVE-2025-64898

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or...

5.3CVSS0.00425EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/10 12:16 a.m.11 views

CVE-2025-64898

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or...

5.3CVSS5.8AI score0.00425EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.15 views

PT-2025-50340

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an issue where an unsafe Dynamic Link Library DLL loading process can allow a local attacker to execute arbitrary code. The MailEnable administrative...

8.5CVSS6.9AI score0.00167EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.13 views

PT-2025-50345

Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 10.54 Description MailEnable versions prior to 10.54 have an issue where the software loads DLLs unsafely, potentially allowing a local attacker to run arbitrary code. The MailEnable administrative executable loads...

8.5CVSS6.6AI score0.00192EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.7 views

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is a dynamic Web server platform and application development framework maintained by Adobe for rapidly building and deploying data-driven dynamic Web sites, Web applications, and enterprise-class services. Adobe ColdFusion suffers from an insufficiently protected credentials...

5.3CVSS5.8AI score0.00425EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 11:41 p.m.37 views

CVE-2025-64898 ColdFusion | Insufficiently Protected Credentials (CWE-522)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or...

5.3CVSS0.00425EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 11:41 p.m.34 views

CVE-2025-61809

Adobe ColdFusion remote vulnerability CVE-2025-61809 arises from Improper Input Validation affecting ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier. The issue could bypass security checks and allow unauthorized read and write access without user interaction, with exploitation described ...

9.1CVSS6.2AI score0.00647EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/09 11:41 p.m.42 views

CVE-2025-64897 ColdFusion | Improper Access Control (CWE-284)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service...

5.6CVSS0.00127EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 9:31 p.m.7 views

EUVD-2025-202309

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

3.3CVSS6.2AI score0.00435EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/09 9:31 p.m.8 views

EUVD-2025-202308

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

3.3CVSS6.3AI score0.00426EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/09 9:15 p.m.4 views

CVE-2025-64786

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

4CVSS5.8AI score0.00426EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 9:15 p.m.4 views

CVE-2025-64787

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

4CVSS5.8AI score0.00435EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 9:15 p.m.8 views

CVE-2025-64787

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

3.3CVSS0.00435EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 8:21 p.m.43 views

CVE-2025-64786 Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

3.3CVSS0.00426EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 8:21 p.m.34 views

CVE-2025-64786

CVE-2025-64786 affects Adobe Acrobat Reader (versions including 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier). The issue is Improper Verification of Cryptographic Signature, resulting in a Security feature bypass with limited unauthorized write access. Exploita...

3.3CVSS5.3AI score0.00426EPSS
SaveExploits0References1Affected Software4
Vulnrichment
Vulnrichment
added 2025/12/09 8:21 p.m.4 views

CVE-2025-64786 Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited...

3.3CVSS5.3AI score0.00426EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 8:21 p.m.45 views

CVE-2025-64787

CVE-2025-64787 affects Adobe Acrobat/Reader on multiple versions (Reader: 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier) due to an Improper Verification of Cryptographic Signature (CWE-347) vulnerability that could bypass security features and grant limited unau...

3.3CVSS5.3AI score0.00435EPSS
SaveExploits0References1Affected Software4
Rows per page
Query Builder