Veille CVE

Mercredi 9 janvier 2013

2 CVE

  1. CVE-2013-0631 7.5 Élevée Exploitée

    Adobe coldfusion

    Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.

  2. CVE-2013-0625 9.8 Critique Exploitée

    Adobe coldfusion

    Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.