Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7715 State: PUBLISHED Published: 2019-03-26T01:01:45 Last Updated: 2024-08-04T20:54:28.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf(). Setting this variable using the sysvar command results in a user-controlled format string during login, resulting in an information leak of memory addresses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bl4ckic3/GHS-Bugs - https://www.ghs.com/products/rtos/in
otes: - CVE Program Container: References: - https://github.com/bl4ckic3/GHS-Bugs - https://www.ghs.com/products/rtos/integrity.html
CVE ID: CVE-2019-7718 State: PUBLISHED Published: 2019-02-11T03:00:00Z Last Updated: 2024-09-17T03:59:13.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=<?php and admin/databack/bakup_tables.php?2=file_put_contents URIs because app/system/databack/admin/index.class.php creates bakup_tables.php temporarily. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jadacheng/vulnerability/blob/master/Metinfo6.x/MetInfo.md
CVE ID: CVE-2019-7719 State: PUBLISHED Published: 2019-02-11T03:00:00Z Last Updated: 2024-09-16T18:13:22.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dignajar/nibbleblog/issues/138
CVE ID: CVE-2019-7720 State: PUBLISHED Published: 2019-02-11T03:00:00Z Last Updated: 2024-09-16T18:44:43.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taogogo/taocms/issues/1
CVE ID: CVE-2019-7721 State: PUBLISHED Published: 2019-02-11T03:00:00Z Last Updated: 2024-09-16T16:57:52.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gnat/nc-cms/issues/14
CVE ID: CVE-2019-7722 State: PUBLISHED Published: 2019-02-11T14:00:00 Last Updated: 2024-08-04T20:54:28.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it (either by direct modification or MITM attacks when using remote rulesets) to perform information disclosure, denial of service, or request forgery attacks. (PMD 6.x is unaffected because of a 2017-09-15 change.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pmd/pmd/issues/1650
CVE ID: CVE-2019-7725 State: PUBLISHED Published: 2020-12-31T04:19:46 Last Updated: 2024-08-04T20:54:28.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nukeviet/nukeviet/blob/4.3.04/CHANGELOG.txt - https://github.com/nukeviet/nukeviet/blob/nukeviet4.3/CHANGELOG.txt - https://github.com/nukeviet/nukeviet/compare/4.3.03...4.3.04 - https://github.com/nukeviet/nukeviet/pull/2740/commits/05dfb9b4531f12944
com/nukeviet/nukeviet/compare/4.3.03...4.3.04 - https://github.com/nukeviet/nukeviet/pull/2740/commits/05dfb9b4531f12944fe39556f58449b9a56241be
CVE ID: CVE-2019-7726 State: PUBLISHED Published: 2020-12-31T04:26:00 Last Updated: 2024-08-04T20:54:28.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nukeviet/nukeviet/blob/4.3.04/CHANGELOG.txt - https://github.com/nukeviet/nukeviet/blob/nukeviet4.3/CHANGELOG.txt - https://github.com/nukeviet/nukeviet/compare/4.3.03...4.3.04 - https://github.com/nukeviet/nukeviet/pull/2740/commits/05dfb9b4531f12944fe39556f58449b9a56241be
CVE ID: CVE-2019-7727 State: PUBLISHED Published: 2019-04-23T19:07:51 Last Updated: 2024-08-04T20:54:28.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol by using the JMX connector. The observed affected TCP port is 6338 but, based on the product's configuration, a different one could be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Apr/2 - https://redtimmysec.wordpress.com
otes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Apr/2 - https://redtimmysec.wordpress.com/2019/03/26/jmx-rmi-multiple-applications-rce/ - http://seclists.org/fulldisclosure/2019/Apr/4
CVE ID: CVE-2019-7728 State: PUBLISHED Published: 2019-02-22T13:00:00 Last Updated: 2024-08-04T20:54:28.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. (The Bosch Smart Home App is not affected. iOS Apps are not affected.) Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-2019-0202.html
CVE ID: CVE-2019-7729 State: PUBLISHED Published: 2019-02-22T13:00:00 Last Updated: 2024-08-04T20:54:28.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succeed in retrieving video clips or still images that have been cached for clip sharing. (The Bosch Smart Home App is not affected. iOS Apps are not affected.) Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/Advisory/BOSCH-2019-0204.html
CVE ID: CVE-2019-7730 State: PUBLISHED Published: 2019-02-11T17:00:00 Last Updated: 2024-08-04T20:54:28.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyWebSQL 3.7 has a Cross-site request forgery (CSRF) vulnerability for deleting a database via the /?q=wrkfrm&type=databases URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddietcc/CVEnotes/blob/master/MyWebSQL/CSRF/readme.md
CVE ID: CVE-2019-7731 State: PUBLISHED Published: 2019-02-11T17:00:00 Last Updated: 2024-08-04T20:54:28.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddietcc/CVEnotes/blob/master/MyWebSQL/RCE/readme.md
CVE ID: CVE-2019-7732 State: PUBLISHED Published: 2019-02-11T17:00:00 Last Updated: 2024-08-04T20:54:28.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rgaufman/live555/issues/20
CVE ID: CVE-2019-7733 State: PUBLISHED Published: 2019-02-11T17:00:00 Last Updated: 2024-08-04T20:54:28.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rgaufman/live555/issues/21 - https://security.gentoo.org/glsa/202005-06
CVE ID: CVE-2019-7736 State: PUBLISHED Published: 2019-02-11T17:00:00 Last Updated: 2024-08-04T20:54:28.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page. NOTE: this may overlap CVE-2019-13101. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=uaT8vX06Jjs
CVE ID: CVE-2019-7737 State: PUBLISHED Published: 2019-02-11T21:00:00 Last Updated: 2024-08-04T20:54:28.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Verytops/verydows/issues/10
CVE ID: CVE-2019-7738 State: PUBLISHED Published: 2019-02-11T21:00:00 Last Updated: 2024-08-04T20:54:28.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: C.P.Sub before 5.3 allows CSRF via a manage.php?p=article_del&id= URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cooltey/C.P.Sub/issues/3 - https://github.com/cooltey/C.P.Sub/commit/b2be52fd89b6fd4d69d63d504bc11742cd679ebe
CVE ID: CVE-2019-7739 State: PUBLISHED Published: 2019-02-12T18:00:00 Last Updated: 2024-08-04T20:54:28.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.3. The "No Filtering" textfilter overrides child settings in the Global Configuration. This is intended behavior. However, it might be unexpected for the user because the configuration dialog lacks an additional message to explain this. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/767-20190203-core-additional-warning-in-the-global-configuration-textfilter-settings - http://www.securityfocus.com/bid/107015
CVE ID: CVE-2019-7740 State: PUBLISHED Published: 2019-02-12T18:00:00 Last Updated: 2024-08-04T20:54:28.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code (core.js writeDynaList) could lead to an XSS attack vector. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/769-20190205-core-xss-issue-in-core-js-writedynalist
CVE ID: CVE-2019-7741 State: PUBLISHED Published: 2019-02-12T18:00:00 Last Updated: 2024-08-04T20:54:28.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.3. Inadequate checks at the Global Configuration helpurl settings allowed stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/768-20190204-core-stored-xss-issue-in-the-global-configuration-help-url-2
CVE ID: CVE-2019-7742 State: PUBLISHED Published: 2019-02-12T18:00:00 Last Updated: 2024-08-04T20:54:28.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.3. A combination of specific web server configurations, in connection with specific file types and browser-side MIME-type sniffing, causes an XSS attack vector. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/766-20190202-core-browserside-mime-type-sniffing-causes-xss-attack-vectors
CVE ID: CVE-2019-7743 State: PUBLISHED Published: 2019-02-12T18:00:00 Last Updated: 2024-08-04T20:54:28.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism (such as the TYPO3 PHAR stream wrapper) to prevent use of the phar:// handler for non .phar-files. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/770-20190206-core-implement-the-typo3-phar-stream-wrapper - http://www.securityfocus.com/bid/107050
CVE ID: CVE-2019-7744 State: PUBLISHED Published: 2019-02-12T18:00:00 Last Updated: 2024-08-04T20:54:28.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! before 3.9.3. Inadequate filtering on URL fields in various core components could lead to an XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/765-20190201-core-lack-of-url-filtering-in-various-core-components
CVE ID: CVE-2019-7745 State: PUBLISHED Published: 2019-05-07T18:59:04 Last Updated: 2024-08-04T20:54:28.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request and then reading the wpa_security_key field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151655/Jiofi-4-JMR-1140-WiFi-Password-Cross-Site-Request-Forgery.html - https://www.exploit-db.com/exploits/46364/ - https://jiosecuritybugs.blogspot.com/2019/02/cve-2019-7745-jiofi-4-jmr1140.html
CVE ID: CVE-2019-7746 State: PUBLISHED Published: 2019-05-07T18:59:57 Last Updated: 2024-08-04T20:54:28.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151656/Jiofi-4-JMR-1140-Admin-Token-Disclosure-Cross-Site-Request-Forgery.html - https://www.exploit-db.com/exploits/46365/
CVE ID: CVE-2019-7747 State: PUBLISHED Published: 2019-02-11T21:00:00 Last Updated: 2024-08-04T20:54:28.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: DbNinja 3.2.7 allows session fixation via the data.php sessid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Broken_Authentication/readme.md
CVE ID: CVE-2019-7748 State: PUBLISHED Published: 2019-02-11T21:00:00 Last Updated: 2024-08-04T20:54:28.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: _includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Reflect_XSS/readme.md
CVE ID: CVE-2019-7751 State: PUBLISHED Published: 2019-12-31T16:39:48 Last Updated: 2024-08-04T20:54:28.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list or enumerate sensitive contents of files. Furthermore, this could allow for privilege escalation by dumping the local machine's SAM and SYSTEM database files, and possibly remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/151963/MarcomCentral-FusionPro-VDP
t Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/151963/MarcomCentral-FusionPro-VDP-Creator-Directory-Traversal.html - https://www.exploit-db.com/exploits/46494
CVE ID: CVE-2019-7753 State: PUBLISHED Published: 2019-02-12T12:00:00Z Last Updated: 2024-09-16T18:40:01.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Verytops/verydows/issues/11
CVE ID: CVE-2019-7755 State: PUBLISHED Published: 2020-03-30T16:49:28 Last Updated: 2024-08-04T20:54:28.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46431/ - https://www.weberp.org - https://www.exploit-database.net/?id=101060
CVE ID: CVE-2019-7758 State: PUBLISHED Published: 2019-05-22T13:11:25 Last Updated: 2024-08-04T20:54:28.492Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Read Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier version, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108
r: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108326 - https://www.zerodayinitiative.com/advisories/ZDI-19-482/
CVE ID: CVE-2019-7759 State: PUBLISHED Published: 2019-05-22T13:13:59 Last Updated: 2024-08-04T20:54:28.345Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.zeroda
/helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.zerodayinitiative.com/advisories/ZDI-19-483/
CVE ID: CVE-2019-7760 State: PUBLISHED Published: 2019-05-22T13:16:41 Last Updated: 2024-08-04T20:54:28.467Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.zeroda
/helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.zerodayinitiative.com/advisories/ZDI-19-484/
CVE ID: CVE-2019-7761 State: PUBLISHED Published: 2019-05-22T13:18:29 Last Updated: 2024-08-04T20:54:28.425Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.talosi
/helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0778
CVE ID: CVE-2019-7762 State: PUBLISHED Published: 2019-05-22T13:21:33 Last Updated: 2024-08-04T20:54:28.474Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320
CVE ID: CVE-2019-7763 State: PUBLISHED Published: 2019-05-22T13:23:07 Last Updated: 2024-08-04T20:54:28.431Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320
CVE ID: CVE-2019-7764 State: PUBLISHED Published: 2019-05-22T13:24:13 Last Updated: 2024-08-04T20:54:28.487Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320
CVE ID: CVE-2019-7765 State: PUBLISHED Published: 2019-05-22T13:25:50 Last Updated: 2024-08-04T20:54:28.445Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320
CVE ID: CVE-2019-7766 State: PUBLISHED Published: 2019-05-22T13:27:24 Last Updated: 2024-08-04T20:54:28.447Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320