|
811
|
9.6 |
CRITICAL
Adjacent
|
-
|
-
|
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati…
New
|
CWE-20
Improper Input Validation
|
CVE-2026-47928
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
812
|
8.4 |
HIGH
Adjacent
|
-
|
-
|
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privi…
New
|
CWE-863
Incorrect Authorization
|
CVE-2026-47929
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
813
|
8.1 |
HIGH
Network
|
-
|
-
|
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage thi…
New
|
CWE-20
Improper Input Validation
|
CVE-2026-47930
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
814
|
8.4 |
HIGH
Adjacent
|
-
|
-
|
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati…
New
|
CWE-20
Improper Input Validation
|
CVE-2026-47931
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
815
|
8.8 |
HIGH
Adjacent
|
-
|
-
|
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature…
New
|
CWE-22
Path Traversal
|
CVE-2026-47932
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
816
|
4.8 |
MEDIUM
Adjacent
|
-
|
-
|
ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vu…
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-47933
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
817
|
7.4 |
HIGH
Local
|
-
|
-
|
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the cu…
New
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2026-47937
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
818
|
10.0 |
CRITICAL
Network
|
-
|
-
|
Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this i…
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-47938
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
819
|
7.4 |
HIGH
Network
|
-
|
-
|
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attack…
New
|
CWE-611
XXE
|
CVE-2026-47960
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
820
|
5.5 |
MEDIUM
Local
|
-
|
-
|
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could re…
New
|
CWE-22
Path Traversal
|
CVE-2026-34657
|
2026-06-11 03:35 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|