Macromedia Coldfusion vulnerabilities

• macromedia coldfusion The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic... CVE-2006-3979 7.2 HighAugust 9, 2006
• macromedia coldfusion Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and... CVE-2006-2364 5.8 MediumMay 15, 2006
• macromedia coldfusion Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in... CVE-2005-4345 7.2 HighDecember 17, 2005
• macromedia coldfusion Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java... CVE-2005-4344 2.1 LowDecember 17, 2005
• macromedia coldfusion Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote... CVE-2005-4343 5.0 MediumDecember 17, 2005
• macromedia coldfusion ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0... CVE-2005-4342 7.5 HighDecember 17, 2005
• macromedia coldfusion fusebox ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid... CVE-2005-2481 5.0 MediumAugust 5, 2005
• macromedia coldfusion fusebox Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to... CVE-2005-2480 Public exploit 4.3 MediumAugust 5, 2005
• macromedia coldfusion, jrun +1 more Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes... CVE-2005-2306 3.7 LowJuly 19, 2005
• macromedia coldfusion Cross-site scripting (XSS) vulnerability in the JRun Web Server in ColdFusion MX 7.0 allows... CVE-2005-1555 4.3 MediumMay 10, 2005
• macromedia coldfusion ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses... CVE-2005-1022 5.0 MediumApril 9, 2005
• macromedia coldfusion Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows... CVE-2004-2505 Public exploit 5.0 MediumDecember 31, 2004
• macromedia coldfusion ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and... CVE-2004-2331 5.5 MediumDecember 31, 2004
• macromedia coldfusion ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP... CVE-2004-2330 5.0 MediumDecember 31, 2004
• macromedia coldfusion Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject... CVE-2004-2204 7.2 HighDecember 31, 2004
• macromedia jrun, hitachi cosminexus enterprise, cosminexus server +1 more +3 more JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to... CVE-2004-1478 7.5 HighDecember 31, 2004
• macromedia jrun, coldfusion +1 more Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such... CVE-2004-0646 10.0 HighNovember 19, 2004
• macromedia coldfusion, jrun, hitachi cosminexus enterprise +1 more +3 more The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE... CVE-2004-0928 5.0 MediumOctober 5, 2004
• macromedia coldfusion The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is... CVE-2004-0407 2.6 LowApril 17, 2004
• macromedia coldfusion, jrun, sun one application server +2 more Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects... CVE-2004-1815 5.0 MediumMarch 15, 2004
• macromedia coldfusion, coldfusion professional +1 more The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option... CVE-2003-1469 Public exploit 5.0 MediumDecember 31, 2003
• macromedia coldfusion, coldfusion professional +1 more Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers... CVE-2002-1992 5.0 MediumDecember 31, 2002
• macromedia coldfusion, microsoft internet information services, windows 2000 +2 more Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion... CVE-2002-1700 Public exploit EPSS 24.3% 4.3 MediumDecember 31, 2002
• macromedia coldfusion Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in... CVE-2002-1309 7.5 HighNovember 21, 2002
• macromedia coldfusion ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to ... CVE-2001-1514 10.0 HighDecember 31, 2001
• macromedia coldfusion server Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent... CVE-2001-0535 7.5 HighOctober 12, 2001
• macromedia coldfusion Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to... CVE-2001-1427 7.5 HighJuly 11, 2001