| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-30287 | ColdFusion | Improper Authentication (CWE-287) | Adobe | ColdFusion | High | 8.2 | 2025-04-08 20:03:02 | Deep Dive |
| CVE-2025-30292 | ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) | Adobe | ColdFusion | Medium | 6.1 | 2025-04-08 20:03:01 | Deep Dive |
| CVE-2025-30290 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Adobe | ColdFusion | High | 8.7 | 2025-04-08 20:03:00 | Deep Dive |
| CVE-2025-30282 | ColdFusion | Improper Authentication (CWE-287) | Adobe | ColdFusion | Critical | 9.1 | 2025-04-08 20:02:59 | Deep Dive |
| CVE-2025-30284 | ColdFusion | Deserialization of Untrusted Data (CWE-502) | Adobe | ColdFusion | High | 8.4 | 2025-04-08 20:02:58 | Deep Dive |
| CVE-2025-30294 | ColdFusion | Improper Input Validation (CWE-20) | Adobe | ColdFusion | Medium | 6.8 | 2025-04-08 20:02:57 | Deep Dive |
| CVE-2025-30289 | ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | Adobe | ColdFusion | High | 8.2 | 2025-04-08 20:02:56 | Deep Dive |
| CVE-2025-30288 | ColdFusion | Improper Access Control (CWE-284) | Adobe | ColdFusion | High | 8.2 | 2025-04-08 20:02:55 | Deep Dive |
| CVE-2025-24446 | ColdFusion | Improper Input Validation (CWE-20) | Adobe | ColdFusion | Critical | 9.1 | 2025-04-08 20:02:54 | Deep Dive |
| CVE-2025-24447 | ColdFusion | Deserialization of Untrusted Data (CWE-502) | Adobe | ColdFusion | Critical | 9.1 | 2025-04-08 20:02:53 | Deep Dive |
| CVE-2025-30281 | ColdFusion | Improper Access Control (CWE-284) | Adobe | ColdFusion | Critical | 9.1 | 2025-04-08 20:02:52 | Deep Dive |
| CVE-2025-30291 | ColdFusion | Information Exposure (CWE-200) | Adobe | ColdFusion | Medium | 5.5 | 2025-04-08 20:02:51 | Deep Dive |
| CVE-2025-30285 | ColdFusion | Deserialization of Untrusted Data (CWE-502) | Adobe | ColdFusion | High | 8.4 | 2025-04-08 20:02:50 | Deep Dive |
| CVE-2025-30286 | ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | Adobe | ColdFusion | High | 8.4 | 2025-04-08 20:02:49 | Deep Dive |
| CVE-2025-30308 | XMPWorker | Out-of-bounds Read (CWE-125) | Adobe | XMPWorker | Medium | 5.5 | 2025-04-08 18:22:30 | Deep Dive |
| CVE-2025-30307 | XMPWorker | Out-of-bounds Read (CWE-125) | Adobe | XMPWorker | Medium | 5.5 | 2025-04-08 18:22:30 | Deep Dive |
| CVE-2025-30305 | XMPWorker | Out-of-bounds Read (CWE-125) | Adobe | XMPWorker | Medium | 5.5 | 2025-04-08 18:22:29 | Deep Dive |
| CVE-2025-30306 | XMPWorker | Out-of-bounds Read (CWE-125) | Adobe | XMPWorker | Medium | 5.5 | 2025-04-08 18:22:28 | Deep Dive |
| CVE-2025-30309 | XMPWorker | Out-of-bounds Read (CWE-125) | Adobe | XMPWorker | Medium | 5.5 | 2025-04-08 18:22:27 | Deep Dive |
| CVE-2025-30300 | Adobe Framemaker | NULL Pointer Dereference (CWE-476) | Adobe | Adobe Framemaker | Medium | 5.5 | 2025-04-08 18:15:13 | Deep Dive |