https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:24:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09168 bdu:2026-09168 https://cve.radiocsirt.org/vuln/bdu:2026-09168 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0821 certfr-2026-avi-0821 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0821 https://cve.radiocsirt.org/vuln/euvd-2026-360671 EUVD-2026-360671 https://cve.radiocsirt.org/vuln/euvd-2026-360671 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48315 <p>ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim&#39;s account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.</p> <p>ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim&#39;s account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48315 https://cve.radiocsirt.org/vuln/ghsa-xp9f-h8r8-p4j7 <p>ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim&#39;s account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.</p> <p>ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim&#39;s account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.</p> https://cve.radiocsirt.org/vuln/ghsa-xp9f-h8r8-p4j7 https://cve.radiocsirt.org/vuln/ncsc-2026-0217 NCSC-2026-0217 https://cve.radiocsirt.org/vuln/ncsc-2026-0217 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2155 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2155