https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:55:02.800534+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2007-avi-086 certa-2007-avi-086 — Deux vulnérabilités sur ColdFusion permettent à un attaquant de réaliser une injection de code indirect (<span class="t… 2026-10-03T04:55:02.884859+00:00 certa-2007-avi-086 https://cve.radiocsirt.org/vuln/euvd-2026-143958 EUVD-2026-143958 2026-10-03T04:55:02.884919+00:00 EUVD-2026-143958 https://cve.radiocsirt.org/vuln/fkie_cve-2006-5859 fkie_cve-2006-5859 2026-10-03T04:55:02.884935+00:00

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.

 https://cve.radiocsirt.org/vuln/ghsa-f654-xq37-47w4 GHSA-f654-xq37-47w4 2026-10-03T04:55:02.884966+00:00

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.

 https://cve.radiocsirt.org/vuln/gsd-2006-5859 gsd-2006-5859 2026-10-03T04:55:02.884981+00:00 gsd-2006-5859 https://cve.radiocsirt.org/vuln/jvndb-2007-000160 jvndb-2007-000160 2026-10-03T04:55:02.884993+00:00

ColdFusion, web application development software from Adobe, contains a cross-site scripting vulnerability. According to the statements from the developer, this vulnerability does not arise when the &quot;Enable Global Script Protection&quot; setting is turned on. This vulnerability is different from JVN#48566866.