Overview Recently, NSFOCUS CERT detected that Adobe issued a security announcement and fixed any file read vulnerability in Adobe ColdFusion (CVE-2024-53961). Due to improper restrictions on pathnames in Adobe ColdFusion, unauthenticated attackers can bypass the application's restrictions to read files or directories outside of the restricted directory. As a result,...
Tag: Adobe
Adobe ColdFusion Remote Code Execution Vulnerability (CVE-2021-21087) Threat Alert
Vulnerability Description On March 23, 2021, NSFOCUS detected that Adobe released a security bulletin fixing a code execution vulnerability (CVE-2021-21087). Due to improper sanitization of user inputs, unauthenticated attackers could execute arbitrary code on the target server by sending a crafted, malicious request to the ColdFusion server. Adobe ColdFusion is...
Adobe Releases May’s Security Updates Threat Alert
Overview On May 12, 2020, local time, Adobe officially released July's security updates to fix multiple vulnerabilities in its various products, including Adobe DNG Software Development Kit (SDK) and Adobe Acrobat and Reader. For details about the security update, visit the following link: https://helpx.adobe.com/security.html (mais…)
Adobe Out-of-Band Patch Tackling Critical Vulnerabilities in Multiple Products Threat Alert
Overview On April 28, local time, Adobe released an out-of-band patch tackling multiple vulnerabilities in Magento, Adobe Illustrator, and Adobe Bridge. For details about the security bulletins and advisories, visit the following link: https://helpx.adobe.com/security.html (mais…)
Adobe Security Advisory for December Security Updates
Overview On December 11, local time, Adobe officially released a December security update that fixes multiple vulnerabilities in Adobe's many products, including Adobe Photoshop CC, Adobe Acrobat and Reader, Brackets, and Adobe ColdFusion. For details, visit the following link: https://helpx.adobe.com/security.html (mais…)
Adobe Security Bulletins for November 2019 Security Updates Threat Alert
Overview On November 12, local time, Adobe officially released the November security update, which fixes multiple vulnerabilities in Adobe's various products, including Adobe Bridge CC, Adobe Media Encoder, Adobe Illustrator CC, and Adobe Animate CC. (mais…)
