Page 3 of 24 results (0.008 seconds)

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information. • http://archives.neohapsis.com/archives/vendor/2000-q3/0059.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5466 •

CVSS: 5.0EPSS: 2%CPEs: 10EXPL: 1

ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. • https://www.exploit-db.com/exploits/19996 http://marc.info/?l=bugtraq&m=96045469627806&w=2 http://www.allaire.com/handlers/index.cfm?ID=16122&Method=Full http://www.osvdb.org/3399 http://www.securityfocus.com/bid/1314 https://exchange.xforce.ibmcloud.com/vulnerabilities/4611 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 1

ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory. • http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0005&L=ntbugtraq&F=&S=&P=4843 http://www.securityfocus.com/bid/1192 •

CVSS: 2.6EPSS: 0%CPEs: 1EXPL: 0

ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site. • http://www.allaire.com/handlers/index.cfm?ID=15697&Method=Full http://www.securityfocus.com/bid/1179 •

CVSS: 2.1EPSS: 0%CPEs: 2EXPL: 0

The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule. • http://www.allaire.com/handlers/index.cfm?ID=15411&Method=Full http://www.securityfocus.com/bid/1181 •