0.0

CVE-2025-4668 -

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

📅 Published: May 13, 2025, 8:53 p.m. 🔄 Last Modified: May 13, 2025, 9:16 p.m.

8.4

CVSS3.1

CVE-2025-43565 - ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute c…

📅 Published: May 13, 2025, 8:49 p.m. 🔄 Last Modified: Feb. 26, 2026, 6:28 p.m.

9.1

CVSS3.1

CVE-2025-43559 - ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execut…

📅 Published: May 13, 2025, 8:49 p.m. 🔄 Last Modified: Feb. 26, 2026, 6:28 p.m.

9.1

CVSS3.1

CVE-2025-43562 - ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injecti…

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could lev…

📅 Published: May 13, 2025, 8:49 p.m. 🔄 Last Modified: Feb. 26, 2026, 6:28 p.m.

6.8

CVSS3.1

CVE-2025-43566 - ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. A high-privileged attacker could leverage this vulnerability to bypass security pro…

📅 Published: May 13, 2025, 8:49 p.m. 🔄 Last Modified: May 19, 2025, 8:40 p.m.

9.1

CVSS3.1

CVE-2025-43564 - ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitati…

📅 Published: May 13, 2025, 8:49 p.m. 🔄 Last Modified: Feb. 26, 2026, 6:28 p.m.

9.1

CVSS3.1

CVE-2025-43560 - ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and execut…

📅 Published: May 13, 2025, 8:49 p.m. 🔄 Last Modified: Feb. 26, 2026, 6:28 p.m.

9.1

CVSS3.1

CVE-2025-43563 - ColdFusion | Improper Access Control (CWE-284)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitati…

📅 Published: May 13, 2025, 8:49 p.m. 🔄 Last Modified: Feb. 26, 2026, 6:28 p.m.

9.1

CVSS3.1

CVE-2025-43561 - ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass authentication mechanisms and ex…

📅 Published: May 13, 2025, 8:49 p.m. 🔄 Last Modified: Feb. 26, 2026, 6:28 p.m.

6.1

CVSS3.1

CVE-2025-30315 - Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing t…

📅 Published: May 13, 2025, 8:32 p.m. 🔄 Last Modified: May 19, 2025, 8:29 p.m.
Total resulsts: 349182
Page 5427 of 34,919
« previous page » next page
Filters