https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:48:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08387 bdu:2025-08387 https://cve.radiocsirt.org/vuln/bdu:2025-08387 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0569 certfr-2025-avi-0569 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0569 https://cve.radiocsirt.org/vuln/cnvd-2025-16377 cnvd-2025-16377 https://cve.radiocsirt.org/vuln/cnvd-2025-16377 https://cve.radiocsirt.org/vuln/euvd-2026-247121 EUVD-2026-247121 https://cve.radiocsirt.org/vuln/euvd-2026-247121 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49538 <p>ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this issue by injecting crafted XML or XPath queries to access unauthorized files or lead to denial of service. Exploitation of this issue does not require user interaction, and attack must have access to shared secrets.</p> <p>ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this issue by injecting crafted XML or XPath queries to access unauthorized files or lead to denial of service. Exploitation of this issue does not require user interaction, and attack must have access to shared secrets.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49538 https://cve.radiocsirt.org/vuln/ghsa-j22j-2qph-cfxc <p>ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this issue by injecting crafted XML or XPath queries to access unauthorized files or lead to denial of service. Exploitation of this issue does not require user interaction, and attack must have access to shared secrets.</p> <p>ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An attacker can exploit this issue by injecting crafted XML or XPath queries to access unauthorized files or lead to denial of service. Exploitation of this issue does not require user interaction, and attack must have access to shared secrets.</p> https://cve.radiocsirt.org/vuln/ghsa-j22j-2qph-cfxc https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1513 <p>Ein Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebige Systemdateien zu lesen, erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, einen Denial-of-Service-Zustand herbeizuführen und weitere nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebige Systemdateien zu lesen, erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, einen Denial-of-Service-Zustand herbeizuführen und weitere nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1513