Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-8140 State: PUBLISHED Published: 2019-11-05T23:25:01 Last Updated: 2024-08-04T21:10:32.997Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Unrestricted file upload Description: An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to transform uploaded JPEG file into a PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8141 State: PUBLISHED Published: 2019-11-05T23:26:49 Last Updated: 2024-08-04T21:10:33.041Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with administrative privileges (system level import) can execute arbitrary code through a Phar deserialization vulnerability in the import functionality. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8142 State: PUBLISHED Published: 2019-11-05T23:27:33 Last Updated: 2024-08-04T21:10:32.991Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via title of an order when configuring sales payment methods for a store. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8143 State: PUBLISHED Published: 2019-11-05T23:28:45 Last Updated: 2024-08-04T21:10:32.942Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: SQL injection Description: A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to email templates can send malicious SQL queries and obtain access to sensitive information stored in the database. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8144 State: PUBLISHED Published: 2019-11-05T23:30:06 Last Updated: 2024-08-04T21:10:33.102Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload through PageBuilder template methods. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8145 State: PUBLISHED Published: 2019-11-06T00:04:43 Last Updated: 2024-08-04T21:10:33.025Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the attribute set name when listing the products. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8146 State: PUBLISHED Published: 2019-11-05T23:31:42 Last Updated: 2024-08-04T21:10:32.979Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code when adding a new customer attribute for stores. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8147 State: PUBLISHED Published: 2019-11-05T23:32:55 Last Updated: 2024-08-04T21:10:32.988Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via customer attribute label. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8148 State: PUBLISHED Published: 2019-11-05T23:34:18 Last Updated: 2024-08-04T21:10:32.978Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when creating a content page via page builder. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8149 State: PUBLISHED Published: 2019-11-05T23:35:11 Last Updated: 2024-08-04T21:10:33.053Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Broken Authentication Description: Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can append arbitrary session id that will not be invalidated by subsequent authentication. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8150 State: PUBLISHED Published: 2019-11-05T23:36:10 Last Updated: 2024-08-04T21:10:33.084Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to manipulate layouts and images can insert a malicious payload into the page layout. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8151 State: PUBLISHED Published: 2019-11-05T23:37:12 Last Updated: 2024-08-04T21:10:33.047Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier gateway. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8152 State: PUBLISHED Published: 2019-11-05T23:47:41 Last Updated: 2024-08-04T21:10:33.108Z Vendors: Adobe Systems Incorporated Products: Magento 1 & 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to the wysiwyg editor can abuse the blockDirective() function and inject malicious javascript in the cache of the admin dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/supee-11219
CVE ID: CVE-2019-8153 State: PUBLISHED Published: 2019-11-05T23:49:40 Last Updated: 2024-08-04T21:10:33.158Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Security bypass Description: A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Successful exploitation of this vulnerability would result in an attacker being able to bypass the `escapeURL()` function and execute a malicious XSS payload. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8154 State: PUBLISHED Published: 2019-11-05T23:50:16 Last Updated: 2024-08-04T21:10:32.963Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to modify product catalogs can trigger PHP file inclusion through a crafted XML file that specifies product design update. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8155 State: PUBLISHED Published: 2019-11-05T23:52:16 Last Updated: 2024-08-04T21:10:33.496Z Vendors: Adobe Systems Incorporated Products: Magento 1 Problem Types: Information leakage Description: Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to network traffic to perform unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/supee-11219
CVE ID: CVE-2019-8156 State: PUBLISHED Published: 2019-11-06T00:01:34 Last Updated: 2024-08-04T21:10:33.446Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Server-side Request Forgery Description: A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to modify store configurations can manipulate the connector api endpoint to enable remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8157 State: PUBLISHED Published: 2019-11-06T00:03:03 Last Updated: 2024-08-04T21:10:33.550Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate downloadable link and cause an invocation of error handling that acceses user input without sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8158 State: PUBLISHED Published: 2019-11-06T00:03:49 Last Updated: 2024-08-04T21:10:33.504Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: XPath Injection vulnerability Description: An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data allows an attacker to limited access to underlying XML data. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-an
. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8159 State: PUBLISHED Published: 2019-11-06T00:01:03 Last Updated: 2024-08-04T21:10:33.375Z Vendors: Adobe Systems Incorporated Products: Magento 2 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with system data manipulation privileges can execute aribitrary code through arbitrary file deletion and OS command injection. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
CVE ID: CVE-2019-8160 State: PUBLISHED Published: 2019-10-17T20:11:09 Last Updated: 2024-08-04T21:10:33.481Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Cross-site Scripting Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8161 State: PUBLISHED Published: 2019-10-17T20:11:32 Last Updated: 2024-08-04T21:10:33.441Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Type Confusion Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8162 State: PUBLISHED Published: 2019-10-17T20:11:53 Last Updated: 2024-08-04T21:10:33.425Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Race Condition Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a race condition vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8163 State: PUBLISHED Published: 2019-10-17T20:13:08 Last Updated: 2024-08-04T21:10:33.491Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Read Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8164 State: PUBLISHED Published: 2019-10-17T20:13:14 Last Updated: 2024-08-04T21:10:33.490Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Read Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8165 State: PUBLISHED Published: 2019-10-17T20:13:33 Last Updated: 2024-08-04T21:10:33.428Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Write Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8166 State: PUBLISHED Published: 2019-10-17T20:13:41 Last Updated: 2024-08-04T21:10:33.426Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Buffer Overrun Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a buffer overrun vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8167 State: PUBLISHED Published: 2019-10-17T20:13:57 Last Updated: 2024-08-04T21:10:33.445Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Type Confusion Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8168 State: PUBLISHED Published: 2019-10-17T20:14:03 Last Updated: 2024-08-04T21:10:33.429Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Read Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8169 State: PUBLISHED Published: 2019-10-17T20:15:07 Last Updated: 2024-08-04T21:10:33.522Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Type Confusion Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8170 State: PUBLISHED Published: 2019-10-17T20:15:26 Last Updated: 2024-08-04T21:10:33.497Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Heap Overflow Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8171 State: PUBLISHED Published: 2019-10-17T20:15:34 Last Updated: 2024-08-04T21:10:33.522Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Write Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8172 State: PUBLISHED Published: 2019-10-17T20:15:40 Last Updated: 2024-08-04T21:10:33.491Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Read Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8173 State: PUBLISHED Published: 2019-10-17T20:15:48 Last Updated: 2024-08-04T21:10:33.463Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Read Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8174 State: PUBLISHED Published: 2019-10-17T20:16:00 Last Updated: 2024-08-04T21:10:33.475Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Untrusted Pointer Dereference Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8175 State: PUBLISHED Published: 2019-10-17T20:16:10 Last Updated: 2024-08-04T21:10:33.536Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8176 State: PUBLISHED Published: 2019-10-17T20:17:40 Last Updated: 2024-08-04T21:10:33.498Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8177 State: PUBLISHED Published: 2019-10-17T20:17:48 Last Updated: 2024-08-04T21:10:33.538Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE ID: CVE-2019-8178 State: PUBLISHED Published: 2019-10-17T20:17:56 Last Updated: 2024-08-04T21:10:33.454Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-49.html