Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19628 State: PUBLISHED Published: 2018-11-29T04:00:00 Last Updated: 2024-08-05T11:44:19.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2018-57.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=212b18825d9b668cda23d334c48867dfa66b2b36 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281 - http://www.securityfocus.com/bid/106051 - https://www.debian.o
tps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15281 - http://www.securityfocus.com/bid/106051 - https://www.debian.org/security/2018/dsa-4359 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-19629 State: PUBLISHED Published: 2019-07-16T13:51:56 Last Updated: 2024-08-05T11:44:19.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server before 7.1.5 allows an attacker to crash the service via a TCP connection. Additional Analyst Notes: - CVE Program Container: References: - https://www.oppositionsecurity.com/imagenow-7-1-4-dos/
CVE ID: CVE-2018-19630 State: PUBLISHED Published: 2018-11-28T10:00:00 Last Updated: 2024-08-05T11:44:19.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.openwrt.org/index.php?do=details&task_id=1974
CVE ID: CVE-2018-19634 State: PUBLISHED Published: 2019-01-22T15:00:00Z Last Updated: 2024-09-16T22:25:50.238Z Vendors: CA Technologies Products: CA Service Desk Manager Problem Types: CWE-284 Description: CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106689 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20190117-01-security-notice-for-ca-service-desk-manager.html
CVE ID: CVE-2018-19635 State: PUBLISHED Published: 2019-01-22T15:00:00Z Last Updated: 2024-09-17T00:11:03.596Z Vendors: CA Technologies Products: CA Service Desk Manager Problem Types: CWE-269 Description: CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106689 - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20190117-01-security-notice-for-ca-service-desk-manager.html
CVE ID: CVE-2018-19636 State: PUBLISHED Published: 2019-03-05T16:00:00Z Last Updated: 2024-09-17T04:03:59.444Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: SUSE Products: supportutils Problem Types: CWE-306 Description: Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1117751 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE ID: CVE-2018-19637 State: PUBLISHED Published: 2019-03-05T16:00:00Z Last Updated: 2024-09-16T20:32:50.690Z Severity: LOW (CVSS 2.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SUSE Products: supportutils Problem Types: CWE-377 Description: Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1117776 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE ID: CVE-2018-19638 State: PUBLISHED Published: 2019-03-05T16:00:00Z Last Updated: 2024-09-17T00:06:09.548Z Severity: LOW (CVSS 2.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SUSE Products: supportutils Problem Types: CWE-377 Description: In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1118460 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE ID: CVE-2018-19639 State: PUBLISHED Published: 2019-03-05T16:00:00Z Last Updated: 2024-09-16T20:43:12.181Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: SUSE Products: supportutils Problem Types: CWE-78 Description: If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1118462 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE ID: CVE-2018-19640 State: PUBLISHED Published: 2019-03-05T16:00:00Z Last Updated: 2024-09-17T01:45:58.729Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: SUSE Products: supportutils Problem Types: CWE-377 Description: If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1118463 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE ID: CVE-2018-19641 State: PUBLISHED Published: 2019-03-27T16:42:08.179702Z Last Updated: 2024-09-16T17:47:50.052Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: Micro Focus Products: Solutions Business Manager (SBM) Problem Types: Unauthenticated remote code execution Description: Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_5/sbm_release_notes.htm
CVE ID: CVE-2018-19642 State: PUBLISHED Published: 2019-03-27T16:55:13.340252Z Last Updated: 2024-09-17T00:06:25.715Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Micro Focus Products: Solutions Business Manager (SBM) Problem Types: denial of service Description: Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_5/sbm_release_notes.htm
CVE ID: CVE-2018-19643 State: PUBLISHED Published: 2019-03-27T17:13:45.549175Z Last Updated: 2024-09-17T02:56:35.734Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: Solutions Business Manager (SBM) Problem Types: Information Leakage Description: Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_5/sbm_release_notes.htm
CVE ID: CVE-2018-19644 State: PUBLISHED Published: 2019-03-27T17:07:17.697306Z Last Updated: 2024-09-17T01:30:52.345Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Micro Focus Products: Solutions Business Manager (SBM) Problem Types: reflected cross site script Description: Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_5/sbm_release_notes.htm
CVE ID: CVE-2018-19645 State: PUBLISHED Published: 2019-02-12T20:00:00Z Last Updated: 2024-09-16T22:55:43.775Z Vendors: NetIQ eDirectory Products: NetIQ Access Manager (NAM) Problem Types: Authentication Bypass Description: An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. Additional Analyst Notes: - CVE Program Container: References: - http://help.serena.com/doc_center/sbm/ver11_5/sbm_release_notes.htm
CVE ID: CVE-2018-19646 State: PUBLISHED Published: 2018-11-28T17:00:00Z Last Updated: 2024-09-17T02:42:18.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands because command-line arguments are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45542
CVE ID: CVE-2018-19648 State: PUBLISHED Published: 2019-03-27T20:04:15 Last Updated: 2024-08-05T11:44:19.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management (NACM) allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF. Additional Analyst Notes: - CVE Program Container: References: - https://supportforums.adtran.com/docs/DOC-9344
CVE ID: CVE-2018-19649 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:44:19.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS exists in InfoVista VistaPortal SE Version 5.1 (build 51029). VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2018/Dec/20
CVE ID: CVE-2018-19650 State: PUBLISHED Published: 2018-12-05T22:00:00 Last Updated: 2024-08-05T11:44:19.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002000 by the IRPFile.sys Antiy-AVL ATool kernel driver. The bug is caused by failure to properly validate the length of the user-supplied data, which results in a kernel stack buffer overflow. An atta
lure to properly validate the length of the user-supplied data, which results in a kernel stack buffer overflow. An attacker can leverage this vulnerability to execute arbitrary code in the context of the kernel, which could lead to privilege escalation and a failed exploit could lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/150549/ATool-1.0.0.22-Stack-Buffer-Overflow.html
CVE ID: CVE-2018-19651 State: PUBLISHED Published: 2018-11-28T22:00:00Z Last Updated: 2024-09-17T01:15:35.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40namhb/ssrf-to-lfi-in-interspire-email-marketer-698a748462a9
CVE ID: CVE-2018-19653 State: PUBLISHED Published: 2018-12-09T19:00:00 Last Updated: 2024-08-05T11:44:20.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/consul-tool/7TCw06oio0I - https://github.com/hashicorp/consul/pull/5069
CVE ID: CVE-2018-19654 State: PUBLISHED Published: 2018-11-29T05:00:00 Last Updated: 2024-08-05T11:44:19.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a duplicate username, as demonstrated by use of the test%c2 string when a test account already exists. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Venan24/SCMS/issues/1
CVE ID: CVE-2018-19655 State: PUBLISHED Published: 2018-11-29T05:00:00 Last Updated: 2024-08-05T11:44:20.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906529 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890086 - https://lists.fedoraproject.org/archives/list/package-announce%40list
bugs.debian.org/cgi-bin/bugreport.cgi?bug=890086 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD65NMWZ5OQNUIF7CLGKLDG4LVPPMJY7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XK4SHVVIZT6FHJVHOQSAFJMQWDLMWKDE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3JX4A5F4DWP6NOEULXQXZ5AIH4GA62U/
CVE ID: CVE-2018-19658 State: PUBLISHED Published: 2020-03-02T19:49:45 Last Updated: 2024-08-05T11:44:20.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote. Additional Analyst Notes: - CVE Program Container: References: - https://yinxiang.com/security/updates/
CVE ID: CVE-2018-19659 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T11:44:20.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/net_WebPingGetValue can result in running OS commands as the root user. This is similar to CVE-2017-12120. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Nov/64 - http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.htm
/fulldisclosure/2018/Nov/64 - http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html
CVE ID: CVE-2018-19660 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T11:44:19.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/webSettingProfileSecurity can result in running OS commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Nov/64 - http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html
CVE ID: CVE-2018-19661 State: PUBLISHED Published: 2018-11-29T07:00:00 Last Updated: 2024-08-05T11:44:19.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://github.com/erikd/libsndfile/issues/429 - https://usn.ubuntu.com/4013-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
CVE ID: CVE-2018-19662 State: PUBLISHED Published: 2018-11-29T07:00:00 Last Updated: 2024-08-05T11:44:20.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://github.com/erikd/libsndfile/issues/429 - https://usn.ubuntu.com/4013-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
CVE ID: CVE-2018-19664 State: PUBLISHED Published: 2018-11-29T07:00:00 Last Updated: 2024-08-05T11:44:19.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libjpeg-turbo/libjpeg-turbo/issues/305 - https://usn.ubuntu.com/4190-1/
CVE ID: CVE-2018-19665 State: PUBLISHED Published: 2018-12-06T23:00:00 Last Updated: 2024-08-05T11:44:19.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg03570.html - http://www.securityfocus.com/bid/106050 - http://www.openwall.com/lists/oss-security/2018/11/29/1 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
CVE ID: CVE-2018-19666 State: PUBLISHED Published: 2018-11-29T07:00:00Z Last Updated: 2024-09-16T23:25:51.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ossec/ossec-hids/issues/1585
CVE ID: CVE-2018-19668 State: REJECTED Published: 2020-02-27T04:35:07 Last Updated: 2020-02-27T04:35:07 Description: No description available.
CVE ID: CVE-2018-19692 State: PUBLISHED Published: 2018-11-29T18:00:00 Last Updated: 2024-08-05T11:44:19.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tp5cms through 2017-05-25. admin.php/upload/picture.html allows remote attackers to execute arbitrary PHP code by uploading a .php file with the image/jpeg content type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fmsdwifull/tp5cms/issues/5
CVE ID: CVE-2018-19693 State: PUBLISHED Published: 2018-11-29T18:00:00 Last Updated: 2024-08-05T11:44:19.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fmsdwifull/tp5cms/issues/6
CVE ID: CVE-2018-19694 State: PUBLISHED Published: 2019-03-17T18:59:02 Last Updated: 2024-08-05T11:44:19.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151119/HMS-Netbiter-WS100-3.30.5-Cross-Site-Scripting.html - https://seclists.org/bugtraq/2019/Jan/9 - https://www.netbiter.com/products - https://www.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2018-12-04-001-ec150-ec250-lc310-lc350-ws100-ws200-cve-2018-19694.pdf
CVE ID: CVE-2018-19698 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T11:44:19.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106164 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-19699 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T11:44:19.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106162 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-19700 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T11:44:19.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106164 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-19701 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T11:44:20.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106162 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html