Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-9524 State: PUBLISHED Published: 2020-05-18T13:19:53 Last Updated: 2024-08-04T10:34:38.169Z Vendors: n/a Products: Enterprise Server and Enterprise developer. Problem Types: Cross Site scripting. Description: Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker (stored XSS) or followed a malicious link (reflected XSS). Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03640252
CVE ID: CVE-2020-9525 State: PUBLISHED Published: 2020-08-10T15:21:43 Last Updated: 2024-08-04T10:34:39.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an authentication flaw that allows remote attackers to perform a man-in-the-middle attack, as demonstrated by eavesdropping on user video/audio streams, capturing credentials, and compromising devices. Additional Analyst Notes: - CVE Program Container: References: - https://redprocyon.com - https://hacked.camera
CVE ID: CVE-2020-9526 State: PUBLISHED Published: 2020-08-10T15:22:40 Last Updated: 2024-08-04T10:34:38.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an information exposure flaw that exposes user session data to supernodes in the network, as demonstrated by passively eavesdropping on user video/audio streams, capturing credentials, and compromising devices. Additional Analyst Notes: - CVE Program Container: References: - https://hacked.camera/ - https://redprocyon.com
CVE ID: CVE-2020-9527 State: PUBLISHED Published: 2020-08-10T15:24:50 Last Updated: 2024-08-04T10:34:39.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20, after 2018-08-09 through 2020), as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via the peer-to-peer (P2P) service. This affects products marketed under the following brand names: Accfly, Alptop, Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes,
Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes, Escam, FLOUREON, GENBOLT, Hongjingtian (HJT), ICAMI, Iegeek, Jecurity, Jennov, KKMoon, LEFTEK, Loosafe, Luowice, Nesuniq, Nettoly, ProElite, QZT, Royallite, SDETER, SV3C, SY2L, Tenvis, ThinkValue, TOMLOV, TPTEK, WGCC, and ZILINK. Additional Analyst Notes: - CVE Program Container: References: - https://hacked.camera/ - https://redprocyon.com
CVE ID: CVE-2020-9528 State: PUBLISHED Published: 2020-08-10T15:25:38 Last Updated: 2024-08-04T10:34:39.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio streams, capturing credentials, and compromising devices. This affects products marketed under the following brand names: Accfly, Alptop, Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Sec
mes: Accfly, Alptop, Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes, Escam, FLOUREON, GENBOLT, Hongjingtian (HJT), ICAMI, Iegeek, Jecurity, Jennov, KKMoon, LEFTEK, Loosafe, Luowice, Nesuniq, Nettoly, ProElite, QZT, Royallite, SDETER, SV3C, SY2L, Tenvis, ThinkValue, TOMLOV, TPTEK, WGCC, and ZILINK. Additional Analyst Notes: - CVE Program Container: References: - https://hacked.camera/ - https://redprocyon.com
CVE ID: CVE-2020-9529 State: PUBLISHED Published: 2020-08-10T15:26:43 Last Updated: 2024-08-04T10:34:38.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This affects products marketed under the following brand names: Accfly, Alptop, Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes, Escam, FLOUREON, GENBOLT, Hongjingtian (H
, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes, Escam, FLOUREON, GENBOLT, Hongjingtian (HJT), ICAMI, Iegeek, Jecurity, Jennov, KKMoon, LEFTEK, Loosafe, Luowice, Nesuniq, Nettoly, ProElite, QZT, Royallite, SDETER, SV3C, SY2L, Tenvis, ThinkValue, TOMLOV, TPTEK, WGCC, and ZILINK. Additional Analyst Notes: - CVE Program Container: References: - https://hacked.camera/ - https://redprocyon.com
CVE ID: CVE-2020-9530 State: PUBLISHED Published: 2020-03-06T16:49:36 Last Updated: 2024-08-04T10:34:39.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific network environment. By jumping to the WebView component of Messaging(com.android.MMS) and loading malicious web pages, information leakage can occur. This is fixed on version: 2001122; 11.0.1.54. Additional Analyst Notes: - CVE Program Container: References: - https://sec.xiaomi.com
on version: 2001122; 11.0.1.54. Additional Analyst Notes: - CVE Program Container: References: - https://sec.xiaomi.com/post/180 - https://www.zerodayinitiative.com/advisories/ZDI-20-289/
CVE ID: CVE-2020-9531 State: PUBLISHED Published: 2020-03-06T16:49:42 Last Updated: 2024-08-04T10:34:38.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.mipicks), the parameters passed in are read and executed. After reading the resource files, relevant components open the link of the incoming URL. Although the URL is safe and can pass security detection, the data carried in the parameters are loaded and executed. An attacker can use NFC tools to get close enough to a user's unlocked phone to cause apps to be installed and information to be leaked. This is fixed on vers
lose enough to a user's unlocked phone to cause apps to be installed and information to be leaked. This is fixed on version: 2001122. Additional Analyst Notes: - CVE Program Container: References: - https://sec.xiaomi.com/post/180 - https://www.zerodayinitiative.com/advisories/ZDI-20-287/ - https://www.zerodayinitiative.com/advisories/ZDI-20-288/
CVE ID: CVE-2020-9534 State: PUBLISHED Published: 2020-03-01T23:03:20 Last Updated: 2024-08-04T10:34:38.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup webpage parameter when f_radius_ip1 is malformed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ladinas/Vulns_of_Embedded_Systems/blob/master/Two%20stack%20overflows%20were%20found%20in%20DIR-615Jx10.0%20Devices.pdf
CVE ID: CVE-2020-9535 State: PUBLISHED Published: 2020-03-01T23:03:10 Last Updated: 2024-08-04T10:34:39.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup_Wizard webpage parameter when f_radius_ip1 is malformed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ladinas/Vulns_of_Embedded_Systems/blob/master/Two%20stack%20overflows%20were%20found%20in%20DIR-615Jx10.0%20Devices.pdf
CVE ID: CVE-2020-9540 State: PUBLISHED Published: 2020-03-01T23:50:25 Last Updated: 2024-08-04T10:34:39.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos HitmanPro.Alert before build 861 allows local elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitmanpro.com/en-us/whatsnewalert.aspx
CVE ID: CVE-2020-9543 State: PUBLISHED Published: 2020-03-12T16:40:20 Last Updated: 2024-08-04T10:34:38.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/manila/+bug/1861485 - https://security.openstack.org/ossa/OSSA-2020-002.html - http://www.openwall.com/lists/oss-security/2020/03/12/1 -
85 - https://security.openstack.org/ossa/OSSA-2020-002.html - http://www.openwall.com/lists/oss-security/2020/03/12/1 - http://www.openwall.com/lists/oss-security/2020/03/12/1
CVE ID: CVE-2020-9544 State: PUBLISHED Published: 2020-03-05T14:57:01 Last Updated: 2024-08-04T10:34:39.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-update POST request. Any attacker that can access the administrative interface can install firmware of their choice. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin - https://ktln2.org/2020/03/05/cve-2020-9544/
CVE ID: CVE-2020-9545 State: PUBLISHED Published: 2020-03-02T01:00:00 Last Updated: 2024-08-04T10:34:39.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site. Additional Analyst Notes: - CVE Program Container: References: - https://forum.palemoon.org/viewtopic.php?f=37&t=23864 - http://www.palemoon.org/releasenotes.shtml
CVE ID: CVE-2020-9546 State: PUBLISHED Published: 2020-03-02T03:59:18 Last Updated: 2024-08-04T10:34:39.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html - https://lists.apache.org/thread.html/rb6fecb5e96a6d61e175ff49f33f2713798dd05cf03067c169d195596%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9464a40d25c3ba1a
13798dd05cf03067c169d195596%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a889656962d098c70c5bb1%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rdd49ab9565bec436a896bc00c4b9fc9dce1598e106c318524fbdfec6%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca%40%3Cissue
pache.org%3E - https://lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rdd4df698d5d8e635144d2994922bf0842e933809eae259521f3b5097%40%3Cissues.zookeeper.apache.org%3E - https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/FasterXML/jackson-databind/issues/2631 - https://lists.apache.org/thread.html/r893a0104e50c1c2559eb9a5812add28ae8c3e5f43712947a9847ec18%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf
5f43712947a9847ec18%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20200904-0006/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2020-9547 State: PUBLISHED Published: 2020-03-02T03:59:08 Last Updated: 2024-08-04T10:34:39.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html - https://lists.apache.org/thread.html/rb6fecb5e96a6d61e175ff49f33f2713798dd05cf03067c169d195596%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9464a40d25c3ba1a5
3798dd05cf03067c169d195596%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a889656962d098c70c5bb1%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rdd49ab9565bec436a896bc00c4b9fc9dce1598e106c318524fbdfec6%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rd0e958d6d5c5ee16efed73314cd0e445c8dbb4bdcc80fc9d1d6c11fc%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb%40%3Cissues.zo
e.org%3E - https://lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rdd4df698d5d8e635144d2994922bf0842e933809eae259521f3b5097%40%3Cissues.zookeeper.apache.org%3E - https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 - https://www.oracle.com/security-alerts/cpujul2020.html - https://lists.apache.org/thread.html/r893a0104e50c1c2559eb9a5812add28ae8c3e5f43712947a9847ec18%40%3Cnotifications.zookeeper.ap
//lists.apache.org/thread.html/r893a0104e50c1c2559eb9a5812add28ae8c3e5f43712947a9847ec18%40%3Cnotifications.zookeeper.apache.org%3E - https://github.com/FasterXML/jackson-databind/issues/2634 - https://lists.apache.org/thread.html/redbe4f1e21bf080f637cf9fbec47729750a2f443a919765360337428%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r742ef70d126548dcf7de5be5779355c9d76a9aec71d7a9ef02c6398a%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/ra3e90712f2d59f8cef03fa796f5adf163d32b81fe7b95385f21790e6%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r4accb2e0de9679174efd3d113a059bab71ff3ec53e882790
cations.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r4accb2e0de9679174efd3d113a059bab71ff3ec53e882790d21c1cc1%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rc0d5d0f72da1ed6fc5e438b1ddb3fa090c73006b55f873cf845375ab%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20200904-0006/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2020-9548 State: PUBLISHED Published: 2020-03-02T03:58:55 Last Updated: 2024-08-04T10:34:39.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/03/msg00008.html - https://lists.apache.org/thread.html/rb6fecb5e96a6d61e175ff49f33f2713798dd05cf03067c169d195596%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a8896569
6%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a889656962d098c70c5bb1%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rdd49ab9565bec436a896bc00c4b9fc9dce1598e106c318524fbdfec6%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r98c9b6e4c9e17792e2cd1ec3e4aa20b61a791939046d3f10888176bb%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca%40%3Cissues.zookeeper.apache.org%3E
ts.apache.org/thread.html/rd5a4457be4623038c3989294429bc063eec433a2e55995d81591e2ca%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rdd4df698d5d8e635144d2994922bf0842e933809eae259521f3b5097%40%3Cissues.zookeeper.apache.org%3E - https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/FasterXML/jackson-databind/issues/2634 - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisor
ssues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20200904-0006/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2020-9549 State: PUBLISHED Published: 2020-03-02T04:32:20 Last Updated: 2024-08-04T10:34:39.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/enferex/pdfresurrect/issues/8 - https://lists.debian.org/debian-lts-announce/2020/03/msg00007.html
CVE ID: CVE-2020-9550 State: PUBLISHED Published: 2020-03-04T18:19:05 Last Updated: 2024-08-04T10:34:39.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely. Additional Analyst Notes: - CVE Program Container: References: - https://rubetek.com/ - https://pastebin.com/CckKKJcM
CVE ID: CVE-2020-9551 State: PUBLISHED Published: 2020-03-25T19:04:24 Last Updated: 2024-08-04T10:34:39.547Z Vendors: Adobe Products: Adobe Bridge Problem Types: Out-of-bounds write Description: Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/bridge/apsb20-17.html
CVE ID: CVE-2020-9552 State: PUBLISHED Published: 2020-03-25T19:04:33 Last Updated: 2024-08-04T10:34:39.444Z Vendors: Adobe Products: Adobe Bridge Problem Types: Heap-based buffer overflow Description: Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/bridge/apsb20-17.html
CVE ID: CVE-2020-9553 State: PUBLISHED Published: 2020-06-26T20:09:49 Last Updated: 2024-08-04T10:34:39.663Z Vendors: Adobe Products: Adobe Bridge Problem Types: Out-of-Bounds Read Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE ID: CVE-2020-9554 State: PUBLISHED Published: 2020-06-26T20:09:22.000Z Last Updated: 2025-05-05T17:07:02.932Z Vendors: Adobe Products: Adobe Bridge Problem Types: Out-of-Bounds Write Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE ID: CVE-2020-9555 State: PUBLISHED Published: 2020-06-26T20:10:08.000Z Last Updated: 2025-05-05T17:06:54.378Z Vendors: Adobe Products: Adobe Bridge Problem Types: Stack-based Buffer Overflow Description: Adobe Bridge versions 10.0.1 and earlier version have a stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE ID: CVE-2020-9556 State: PUBLISHED Published: 2020-06-26T20:10:32.000Z Last Updated: 2025-05-05T17:06:44.881Z Vendors: Adobe Products: Adobe Bridge Problem Types: Out-of-Bounds Write Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE ID: CVE-2020-9557 State: PUBLISHED Published: 2020-06-26T20:10:41 Last Updated: 2024-08-04T10:34:39.560Z Vendors: Adobe Products: Adobe Bridge Problem Types: Out-of-Bounds Read Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE ID: CVE-2020-9558 State: PUBLISHED Published: 2020-06-26T20:08:35 Last Updated: 2024-08-04T10:34:39.834Z Vendors: Adobe Products: Adobe Bridge Problem Types: Out-of-Bounds Read Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE ID: CVE-2020-9559 State: PUBLISHED Published: 2020-06-26T20:09:41.000Z Last Updated: 2025-05-05T17:06:35.884Z Vendors: Adobe Products: Adobe Bridge Problem Types: Out-of-Bounds Write Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb20-19.html