CVSS: 5.3EPSS: 0%CPEs: 23EXPL: 0CVE-2018-15962
https://notcve.org/view.php?id=CVE-2018-15962
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a directory listing vulnerability. Successful exploitation could lead to information disclosure. Adobe ColdFusion en versiones 12 de julio (2018.0.0.310739), Update 6 y anteriores, y Update 14 y anteriores, tiene una vulnerabilidad de omisión de seguridad. Su explotación con éxito podría resultar en una divulgación de información. • http://www.securityfocus.com/bid/105318 http://www.securitytracker.com/id/1041621 https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 32%CPEs: 23EXPL: 0CVE-2018-15958
https://notcve.org/view.php?id=CVE-2018-15958
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution. Adobe ColdFusion en versiones 12 de julio (2018.0.0.310739), Update 6 y anteriores, y Update 14 y anteriores, tiene una vulnerabilidad de deserialización de datos no fiables. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código. • http://www.securityfocus.com/bid/105313 http://www.securitytracker.com/id/1041621 https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html • CWE-502: Deserialization of Untrusted Data •
CVSS: 10.0EPSS: 97%CPEs: 23EXPL: 5CVE-2018-15961 – Adobe ColdFusion Unrestricted File Upload Vulnerability
https://notcve.org/view.php?id=CVE-2018-15961
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. Adobe ColdFusion en versiones 12 de julio (2018.0.0.310739), Update 6 y anteriores, y Update 14 y anteriores, tiene una vulnerabilidad de subida de archivos sin restricción. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código. A file upload vulnerability exists in the CKEditor of Adobe ColdFusion 11 (Update 14 and earlier). • https://www.exploit-db.com/exploits/45979 https://github.com/vah13/CVE-2018-15961 https://github.com/xbufu/CVE-2018-15961 https://github.com/orangmuda/CVE-2018-15961 https://github.com/bu1xuan2/CVE-2018-15961 http://www.securityfocus.com/bid/105314 http://www.securitytracker.com/id/1041621 https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0CVE-2018-4938
https://notcve.org/view.php?id=CVE-2018-4938
Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation. Adobe ColdFusion Update 5 y anteriores y ColdFusion 11 Update 13 y anteriores tienen una vulnerabilidad explotable de carga de biblioteca no segura. Su explotación con éxito podría conducir al escalado de privilegios locales. • http://www.securityfocus.com/bid/103718 https://helpx.adobe.com/security/products/coldfusion/apsb18-14.html • CWE-427: Uncontrolled Search Path Element •
CVSS: 10.0EPSS: 96%CPEs: 20EXPL: 0CVE-2018-4939 – Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
https://notcve.org/view.php?id=CVE-2018-4939
Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution. Adobe ColdFusion Update 5 y anteriores y ColdFusion 11 Update 13 y anteriores tienen una vulnerabilidad explotable de deserialización de datos no fiables. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código. Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution. • http://www.securityfocus.com/bid/103718 https://helpx.adobe.com/security/products/coldfusion/apsb18-14.html • CWE-502: Deserialization of Untrusted Data •