NotCVE - vendor:"Adobe" product:"Coldfusion" version:"2016"

Page 7 of 72 results (0.006 seconds)

CVSS: 10.0EPSS: 85%CPEs: 20EXPL: 0

CVE-2018-4939 – Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

https://notcve.org/view.php?id=CVE-2018-4939

19 May 2018 — Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution. Adobe ColdFusion Update 5 y anteriores y ColdFusion 11 Update 13 y anteriores tienen una vulnerabilidad explotable de deserialización de datos no fiables. La explotación con éxito de esta vulnerabilidad podría permitir la ejecución arbitraria de código. Adobe ColdFusion contains a dese... • http://www.securityfocus.com/bid/103718 • CWE-502: Deserialization of Untrusted Data •

CVSS: 9.8EPSS: 24%CPEs: 18EXPL: 0

CVE-2017-11283

https://notcve.org/view.php?id=CVE-2017-11283

01 Dec 2017 — Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11. Adobe ColdFusion tiene una vulnerabilidad de deserialización de datos no fiables. Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11. • http://www.securityfocus.com/bid/100708 • CWE-502: Deserialization of Untrusted Data •

CVSS: 9.8EPSS: 24%CPEs: 18EXPL: 0

CVE-2017-11284

https://notcve.org/view.php?id=CVE-2017-11284

CVSS: 6.1EPSS: 1%CPEs: 18EXPL: 0

CVE-2017-11285

https://notcve.org/view.php?id=CVE-2017-11285

01 Dec 2017 — Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11. Adobe ColdFusion tiene una vulnerabilidad de Cross-Site Scripting (XSS). Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11. • http://www.securityfocus.com/bid/100711 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 1%CPEs: 18EXPL: 0

CVE-2017-11286

https://notcve.org/view.php?id=CVE-2017-11286

01 Dec 2017 — Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11. Adobe ColdFusion tiene una vulnerabilidad de inyección de XEE (XML External Entity). Esto afecta al Update 4 y a versiones anteriores para ColdFusion 2016 y al Update 12 y versiones anteriores para ColdFusion 11. • http://www.securityfocus.com/bid/100715 • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 6.1EPSS: 1%CPEs: 39EXPL: 0

CVE-2017-3008

https://notcve.org/view.php?id=CVE-2017-3008

27 Apr 2017 — Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a reflected cross-site scripting vulnerability. Adobe ColdFusion 2016 Update 3 y anteriores, ColdFusion 11 update 11 y anteriores, ColdFusion 10 Update 22 y versiones anteriores tienen una vulnerabilidad de cross-site scripting. • http://www.securityfocus.com/bid/98002 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 10.0EPSS: 93%CPEs: 39EXPL: 4

CVE-2017-3066 – Adobe ColdFusion Deserialization Vulnerability

https://notcve.org/view.php?id=CVE-2017-3066

27 Apr 2017 — Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution. Adobe ColdFusion 2016 Update 3 y anteriores, ColdFusion 11 update 11 y anteriores, ColdFusion 10 Update 22 y anteriores tienen una vulnerabilidad de deserialización de Java en la librería Apache BlazeDS. Una explotación exitosa podría conducir a la ejecución... • https://packetstorm.news/files/id/146285 • CWE-502: Deserialization of Untrusted Data •

CVSS: 7.5EPSS: 8%CPEs: 7EXPL: 0

CVE-2016-7887

https://notcve.org/view.php?id=CVE-2016-7887

15 Dec 2016 — Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that could lead to information disclosure. Adobe ColdFusion Builder versión 2016 actualización 2 y versiones anteriores, 3.0.3 y versiones anteriores tienen una vulnerabilidad importante que podría conducir a la divulgación de información. • http://www.securityfocus.com/bid/94874 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.1EPSS: 0%CPEs: 31EXPL: 0

CVE-2016-4159

https://notcve.org/view.php?id=CVE-2016-4159

16 Jun 2016 — Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en Adobe ColdFusion 10 en versiones anteriores a Update 20, 11 en versiones anteriores a Update 9 y 2016 en versiones anteriores a Update 2 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. • http://www.securitytracker.com/id/1036098 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 28EXPL: 0

CVE-2016-1113

https://notcve.org/view.php?id=CVE-2016-1113

11 May 2016 — Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en Adobe ColdFusion 10 en versiones anteriores a Update 19, 11 en versiones anteriores a Update 8 y 2016 en versiones anteriores a Update 1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. • http://www.securityfocus.com/bid/90507 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

1...5 6 7 8