allaire kayıtları
allaire üreticisine ait 24 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tüm kayıtlar
24 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-1999-0760İstismar yok | Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.allaire · coldfusion server | Kritik10,0 | — | %1,7 | 12 Mar 2001 |
32İzleyin | CVE-1999-0455Kavram kanıtı | The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, whallaire · coldfusion server | Yüksek7,5 | — | %5,8 | 25 Ara 1999 |
32İzleyin | CVE-2000-0057Kavram kanıtı | Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system infoallaire · coldfusion server | Yüksek7,5 | — | %5,5 | 4 Oca 2000 |
32İzleyin | CVE-1999-0477Kavram kanıtı | The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, whichallaire · coldfusion server | Yüksek7,5 | — | %5,3 | 25 Ara 1999 |
31İzleyin | CVE-2002-0108İstismar yok | Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hallaire · forums | Yüksek7,5 | — | %3,2 | 25 Mar 2002 |
30İzleyin | CVE-1999-1124İstismar yok | HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the taallaire · coldfusion | Yüksek7,5 | — | %1,4 | 31 Ara 1999 |
30İzleyin | CVE-1999-0923İstismar yok | Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server allaire · coldfusion server | Yüksek7,5 | — | %1,3 | 12 Mar 2001 |
30İzleyin | CVE-2000-0120İstismar yok | The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.allaire · spectra | Yüksek7,5 | — | %1,2 | 1 Oca 2000 |
26İzleyin | CVE-2000-0297İstismar yok | Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModeraallaire · forums | Orta6,4 | — | %2,5 | 3 Nis 2000 |
26İzleyin | CVE-2001-1120İstismar yok | Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusiallaire · coldfusion server | Orta6,4 | — | %1,9 | 11 Tem 2001 |
25İzleyin | CVE-2000-0862İstismar yok | Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configurallaire · spectra | Orta6,4 | — | %1,3 | 14 Kas 2000 |
23İzleyin | CVE-2000-0538Kavram kanıtı | ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.allaire · coldfusion server | Orta5,0 | — | %8,4 | 7 Haz 2000 |
22İzleyin | CVE-1999-0800Kavram kanıtı | The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.allaire · forums | Orta5,0 | — | %7,6 | 12 Mar 2001 |
21İzleyin | CVE-2002-0576İstismar yok | ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP rallaire · coldfusion server | Orta5,0 | — | %2,6 | 18 Haz 2002 |
21İzleyin | CVE-2000-0189İstismar yok | ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrallaire · coldfusion server | Orta5,0 | — | %1,9 | 1 Mar 2000 |
20İzleyin | CVE-1999-0924İstismar yok | The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.allaire · coldfusion server | Orta5,0 | — | %1,6 | 12 Mar 2001 |
20İzleyin | CVE-2000-0410İstismar yok | ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file thatallaire · coldfusion server | Orta5,0 | — | %1,3 | 10 May 2000 |
20İzleyin | CVE-1999-0922İstismar yok | An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.allaire · coldfusion server | Orta5,0 | — | %1,3 | 12 Mar 2001 |
20İzleyin | CVE-2000-0051İstismar yok | The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections foallaire · spectra | Orta5,0 | — | %1,2 | 4 Oca 2000 |
20İzleyin | CVE-1999-0756İstismar yok | ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.allaire · coldfusion server | Orta5,0 | — | %1,2 | 12 Mar 2001 |
18İzleyin | CVE-2000-0050İstismar yok | The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.allaire · spectra | Orta4,6 | — | %0,3 | 4 Oca 2000 |
10İzleyin | CVE-2000-0382İstismar yok | ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to theallaire · clustercats | Düşük2,6 | — | %0,9 | 8 May 2000 |
8İzleyin | CVE-1999-0757Kavram kanıtı | The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.allaire · coldfusion server | Düşük2,1 | — | %0,5 | 12 Mar 2001 |
8İzleyin | CVE-2000-0334İstismar yok | The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorizeallaire · spectra | Düşük2,1 | — | %0,3 | 24 Nis 2000 |
- CVE-1999-076041Planlayın
Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.
KritikCVSS 10,0İstismar yokEPSS %1allaire · coldfusion server12 Mar 2001
- CVE-1999-045532İzleyin
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, wh
YüksekCVSS 7,5Kavram kanıtıEPSS %5allaire · coldfusion server25 Ara 1999
- CVE-2000-005732İzleyin
Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system info
YüksekCVSS 7,5Kavram kanıtıEPSS %5allaire · coldfusion server4 Oca 2000
- CVE-1999-047732İzleyin
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which
YüksekCVSS 7,5Kavram kanıtıEPSS %5allaire · coldfusion server25 Ara 1999
- CVE-2002-010831İzleyin
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the h
YüksekCVSS 7,5İstismar yokEPSS %3allaire · forums25 Mar 2002
- CVE-1999-112430İzleyin
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the ta
YüksekCVSS 7,5İstismar yokEPSS %1allaire · coldfusion31 Ara 1999
- CVE-1999-092330İzleyin
Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server
YüksekCVSS 7,5İstismar yokEPSS %1allaire · coldfusion server12 Mar 2001
- CVE-2000-012030İzleyin
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
YüksekCVSS 7,5İstismar yokEPSS %1allaire · spectra1 Oca 2000
- CVE-2000-029726İzleyin
Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModera
OrtaCVSS 6,4İstismar yokEPSS %2allaire · forums3 Nis 2000
- CVE-2001-112026İzleyin
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusi
OrtaCVSS 6,4İstismar yokEPSS %1allaire · coldfusion server11 Tem 2001
- CVE-2000-086225İzleyin
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configur
OrtaCVSS 6,4İstismar yokEPSS %1allaire · spectra14 Kas 2000
- CVE-2000-053823İzleyin
ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.
OrtaCVSS 5,0Kavram kanıtıEPSS %8allaire · coldfusion server7 Haz 2000
- CVE-1999-080022İzleyin
The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
OrtaCVSS 5,0Kavram kanıtıEPSS %7allaire · forums12 Mar 2001
- CVE-2002-057621İzleyin
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP r
OrtaCVSS 5,0İstismar yokEPSS %2allaire · coldfusion server18 Haz 2002
- CVE-2000-018921İzleyin
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onr
OrtaCVSS 5,0İstismar yokEPSS %1allaire · coldfusion server1 Mar 2000
- CVE-1999-092420İzleyin
The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
OrtaCVSS 5,0İstismar yokEPSS %1allaire · coldfusion server12 Mar 2001
- CVE-2000-041020İzleyin
ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that
OrtaCVSS 5,0İstismar yokEPSS %1allaire · coldfusion server10 May 2000
- CVE-1999-092220İzleyin
An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
OrtaCVSS 5,0İstismar yokEPSS %1allaire · coldfusion server12 Mar 2001
- CVE-2000-005120İzleyin
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections fo
OrtaCVSS 5,0İstismar yokEPSS %1allaire · spectra4 Oca 2000
- CVE-1999-075620İzleyin
ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.
OrtaCVSS 5,0İstismar yokEPSS %1allaire · coldfusion server12 Mar 2001
- CVE-2000-005018İzleyin
The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.
OrtaCVSS 4,6İstismar yokEPSS %0allaire · spectra4 Oca 2000
- CVE-2000-038210İzleyin
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the
DüşükCVSS 2,6İstismar yokEPSS %0allaire · clustercats8 May 2000
- CVE-1999-07578İzleyin
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
DüşükCVSS 2,1Kavram kanıtıEPSS %0allaire · coldfusion server12 Mar 2001
- CVE-2000-03348İzleyin
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorize
DüşükCVSS 2,1İstismar yokEPSS %0allaire · spectra24 Nis 2000