https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:54:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-15474 bdu:2025-15474 https://cve.radiocsirt.org/vuln/bdu:2025-15474 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1085 certfr-2025-avi-1085 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1085 https://cve.radiocsirt.org/vuln/cnvd-2026-04943 cnvd-2026-04943 https://cve.radiocsirt.org/vuln/cnvd-2026-04943 https://cve.radiocsirt.org/vuln/euvd-2026-329715 EUVD-2026-329715 https://cve.radiocsirt.org/vuln/euvd-2026-329715 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61821 <p>ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference (&#39;XXE&#39;) vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and data on the server. Exploit depends on conditions beyond the attacker&#39;s control. Exploitation of this issue does not require user interaction and scope is changed.</p> <p>ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference (&#39;XXE&#39;) vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and data on the server. Exploit depends on conditions beyond the attacker&#39;s control. Exploitation of this issue does not require user interaction and scope is changed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-61821 https://cve.radiocsirt.org/vuln/ghsa-cv32-3w6x-v6x4 <p>ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference (&#39;XXE&#39;) vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and data on the server. Exploitation of this issue does not require user interaction and scope is changed.</p> <p>ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference (&#39;XXE&#39;) vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and data on the server. Exploitation of this issue does not require user interaction and scope is changed.</p> https://cve.radiocsirt.org/vuln/ghsa-cv32-3w6x-v6x4 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2800 <p>Ein Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebigen Code auszuführen, Dateien zu manipulieren und Sicherheitsmechanismen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebigen Code auszuführen, Dateien zu manipulieren und Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2800