Adobe · weakness class
File and Path Handling
212 CVEs · 4 exploited
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 4
- check available
- 1
- likely to be exploited
- 15
Every one of the 212 is a mark on the map. Named now: 1 to 26, most at risk first.
- Adobe ColdFusion - Unrestricted File Upload Remote Code Execution
- Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI
- Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
- Adobe ColdFusion - RDS Arbitrary File Write
- ColdFusion - Path Traversal
- Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability
- Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability
- ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful exploitation could lead t…
- Adobe ColdFusion Directory Traversal Arbitrary file system read Vulnerability
- ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- Adobe ColdFusion Application Server Directory Traversal Arbitrary file system write
- Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability
- Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability
- ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability. Successful exploitation could lead to Access Control Bypass i…
- ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerability. Successful exploitation could lead…
- ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
- Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability.
- Magento UPWARD-php Path traversal vulnerability via UPWARD Connector
- Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library f…
- Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library…
- ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.