Search Results (24 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2001-1120 1 Allaire 1 Coldfusion Server 2025-04-03 N/A
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.
CVE-2000-0051 1 Allaire 1 Spectra 2025-04-03 N/A
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.
CVE-2000-0120 1 Allaire 1 Spectra 2025-04-03 N/A
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
CVE-2000-0382 1 Allaire 1 Clustercats 2025-04-03 N/A
ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site.