https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:21:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-10062 bdu:2026-10062 https://cve.radiocsirt.org/vuln/bdu:2026-10062 https://cve.radiocsirt.org/vuln/euvd-2026-360933 EUVD-2026-360933 https://cve.radiocsirt.org/vuln/euvd-2026-360933 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48320 <p>ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim&#39;s account or session. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.</p> <p>ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim&#39;s account or session. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48320 https://cve.radiocsirt.org/vuln/ghsa-gvvg-xf8x-hr96 <p>ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim&#39;s account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.</p> <p>ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim&#39;s account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.</p> https://cve.radiocsirt.org/vuln/ghsa-gvvg-xf8x-hr96 https://cve.radiocsirt.org/vuln/ncsc-2026-0241 NCSC-2026-0241 https://cve.radiocsirt.org/vuln/ncsc-2026-0241 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2364 <p>Ein Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2364