Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-15888 State: PUBLISHED Published: 2018-08-26T21:00:00 Last Updated: 2024-08-05T10:10:05.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly. Additional Analyst Notes: - CVE Program Container: References: - http://wooyun.org/bugs/wooyun-2015-091831 - https://www.seebug.org/vuldb/ssvid-96205
CVE ID: CVE-2018-15889 State: REJECTED Published: 2018-08-26T21:00:00 Last Updated: 2019-08-19T20:53:22 Description: No description available.
CVE ID: CVE-2018-15890 State: PUBLISHED Published: 2019-06-20T17:00:53 Last Updated: 2024-08-05T10:10:04.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and decoder.readObject in crypto/ECKey.java. When a node syncs and mines a new block, arbitrary OS commands can be run on the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ethereum/ethereumj - https://github.com/frohoff/ysoserial/ - https://github.com/ethereum/ethereumj/issues/1161
CVE ID: CVE-2018-15891 State: PUBLISHED Published: 2019-06-20T16:35:57 Last Updated: 2024-08-05T10:10:06.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name. Additional Analyst Notes: - CVE Program Container: References: - https://www.freepbx.org/ - https://wiki.freepbx.org/display/FOP/2018-09-11+Core+Stored+XSS?src=contextnavpagetreemode
CVE ID: CVE-2018-15892 State: PUBLISHED Published: 2019-06-20T16:29:38 Last Updated: 2024-08-05T10:10:05.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page. Additional Analyst Notes: - CVE Program Container: References: - https://www.freepbx.org/ - https://wiki.freepbx.org/display/FOP/2018-09-11+DISA+SQL+Injection
CVE ID: CVE-2018-15893 State: PUBLISHED Published: 2018-08-27T04:00:00 Last Updated: 2024-08-05T10:10:05.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the index.php?m=core&f=copyfrom&v=listing keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/149
CVE ID: CVE-2018-15894 State: PUBLISHED Published: 2018-08-27T04:00:00 Last Updated: 2024-08-05T10:10:05.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/150
CVE ID: CVE-2018-15895 State: PUBLISHED Published: 2018-08-27T04:00:00 Last Updated: 2024-08-05T10:10:04.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spider_tools.class.php does not block DNS hostnames associated with private and reserved IP addresses, as demonstrated by 127.0.0.1 in an A record. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14858. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/idreamsoft/iCMS/issues/40
CVE ID: CVE-2018-15896 State: PUBLISHED Published: 2018-08-28T21:00:00 Last Updated: 2024-08-05T10:10:05.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-15896-vikas-chaudhary/
CVE ID: CVE-2018-15897 State: PUBLISHED Published: 2018-08-28T21:00:00 Last Updated: 2024-08-05T10:10:05.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field, as demonstrated by crossPwn. Additional Analyst Notes: - CVE Program Container: References: - https://gkaim.com/cve-2018-15897-vikas-chaudhary/
CVE ID: CVE-2018-15898 State: PUBLISHED Published: 2018-09-11T21:00:00 Last Updated: 2024-08-05T10:10:05.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Subsonic Music Streamer application 4.4 for Android has Improper Certificate Validation of the Subsonic server certificate, which might allow man-in-the-middle attackers to obtain interaction data. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Sep/6 - http://packetstormsecurity.com/files/149267/Subsonic-Music-Streamer-4.4-For-Android-Improper-Certificate-Validation.html
CVE ID: CVE-2018-15899 State: PUBLISHED Published: 2018-08-27T04:00:00 Last Updated: 2024-08-05T10:10:05.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/21
CVE ID: CVE-2018-15901 State: PUBLISHED Published: 2018-08-28T19:00:00 Last Updated: 2024-08-05T10:10:05.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dhananjay-bajaj/e107_2.1.8_csrf
CVE ID: CVE-2018-15903 State: PUBLISHED Published: 2018-10-08T17:00:00 Last Updated: 2024-08-05T10:10:04.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Discuss v1.2.1 module in Claromentis 8.2.2 is vulnerable to stored Cross Site Scripting (XSS). An authenticated attacker will be able to place malicious JavaScript in the discussion forum, which is present in the login landing page. A low privilege user can use this to steal the session cookies from high privilege accounts and hijack these, enabling them to hijack the elevated session and perform actions in their security context. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldi
in their security context. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2018/Oct/12
CVE ID: CVE-2018-15904 State: PUBLISHED Published: 2018-08-27T14:00:00 Last Updated: 2024-08-05T10:10:05.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: A10 ACOS Web Application Firewall (WAF) 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8, and 4.1.2 before 4.1.2-P4 mishandles the configured rules for blocking SQL injection attacks, aka A10-2017-0008. Additional Analyst Notes: - CVE Program Container: References: - https://www.a10networks.com/support/security-advisories/waf-sql-injection-attack-sqlia-vulnerability
CVE ID: CVE-2018-15906 State: PUBLISHED Published: 2019-03-17T21:34:13 Last Updated: 2024-08-05T10:10:05.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151473/SolarWinds-Serv-U-FTP-15.1.6-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2019/Feb/4 - http://www.securityfocus.com/bid/106844
CVE ID: CVE-2018-15907 State: PUBLISHED Published: 2018-08-29T19:00:00 Last Updated: 2024-08-05T10:10:05.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might overlap CVE-2018-15852 and CVE-2018-16310. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions Additional Analyst Notes: - CVE
ng attack. This has been confirmed through testing against official up-to-date versions Additional Analyst Notes: - CVE Program Container: References: - https://bkd00r.wordpress.com/2018/08/27/cve-2018-15907-exploit-title-techniclor-formerly-rca-tc8305c-wireless-gateway-802-11b-g-n-gigaport-x-4-port-router-w-2-voice-lines-xfinity-comcast-buffer-overflow/
CVE ID: CVE-2018-15908 State: PUBLISHED Published: 2018-08-27T17:00:00 Last Updated: 2024-08-05T10:10:05.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3650 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0d3901189f245232f0161addf215d7268c4d05a3 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - https://www.kb.cert.org/vuls/id/332928 - https://www.debian.org/security/2018/dsa-42
- https://usn.ubuntu.com/3768-1/ - https://www.kb.cert.org/vuls/id/332928 - https://www.debian.org/security/2018/dsa-4288 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
CVE ID: CVE-2018-15909 State: PUBLISHED Published: 2018-08-27T17:00:00 Last Updated: 2024-08-05T10:10:05.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3650 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6 - http://www.securityfocus.
/git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e01e77a36cbb2e0277bc3a63852244bec41be0f6 - http://www.securityfocus.com/bid/105178 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0b6cd1918e1ec4ffd087400a754a845180a4522b - https://www.kb.cert.org/vuls/id/332928 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - https://support.f5.com/csp/article/K24803507?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-15910 State: PUBLISHED Published: 2018-08-27T17:00:00 Last Updated: 2024-08-05T10:10:05.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or execute code. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2918 - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c3476dde7743761a4e1d39a631716199b696b880 - https://bugs.ghostscript.com/show_bug.cgi?id=
/?p=ghostpdl.git%3Ba=commit%3Bh=c3476dde7743761a4e1d39a631716199b696b880 - https://bugs.ghostscript.com/show_bug.cgi?id=699656 - https://www.kb.cert.org/vuls/id/332928 - https://www.debian.org/security/2018/dsa-4288 - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - http://www.securityfocus.com/bid/105122 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-15911 State: PUBLISHED Published: 2018-08-28T04:00:00 Last Updated: 2024-08-05T10:10:04.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-12 - https://usn.ubuntu.com/3768-1/ - https://bugs.ghostscript.com/show_bug.cgi?id=699665 - https://access.redhat.com/errata/RHSA-2018:3834 - https://www.kb.cert.org/vuls/id/332928 - https://www.debian.org/security/20
://access.redhat.com/errata/RHSA-2018:3834 - https://www.kb.cert.org/vuls/id/332928 - https://www.debian.org/security/2018/dsa-4288 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=8e9ce5016db968b40e4ec255a3005f2786cce45f - https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html - http://www.securityfocus.com/bid/105122 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44101 - https://support.f5.com/csp/article/K22141757?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2018-15912 State: PUBLISHED Published: 2018-08-29T19:00:00 Last Updated: 2024-08-05T10:10:05.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially containing hooks with arbitrary code, which will automatically be run as root, or remove packages vital to the system. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.manjaro.org/packages/core/manjaro-system/commit/8208b8a - https://lists.manjaro.org/pipermail/manjaro-security/2018-August/000785.html
CVE ID: CVE-2018-15913 State: PUBLISHED Published: 2019-06-20T18:04:56 Last Updated: 2024-08-05T10:10:05.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera Manager uses a 'returnUrl' parameter to redirect the user to another page in Cloudera Manager once a wizard is completed. The validity of this parameter was not checked. As a result, the user could be automatically redirected to an attacker's external site or perform a malicious JavaScript function that results in cross-site scripting (XSS). This was fixed by not allowing any value in the returnUrl parameter with patterns such as http
oss-site scripting (XSS). This was fixed by not allowing any value in the returnUrl parameter with patterns such as http://, https://, //, or javascript. The only exceptions to this rule are the SAML Login/Logout URLs, which remain supported since they are explicitly configured and they are not passed via the returnUrl parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE ID: CVE-2018-15917 State: PUBLISHED Published: 2018-09-05T21:00:00 Last Updated: 2024-08-05T10:10:05.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter to session/language. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45338/ - https://github.com/bbalet/jorani/issues/254 - https://hackpuntes.com/cve-2018-15917-jorani-leave-management-system-0-6-5-cross-site-scripting-persistente/
CVE ID: CVE-2018-15918 State: PUBLISHED Published: 2018-09-05T21:00:00 Last Updated: 2024-08-05T10:10:05.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify sensitive information from the database used by the application via the startdate or enddate parameter to leaves/validate. Additional Analyst Notes: - CVE Program Container: References: - https://hackpuntes.com/cve-2018-15918-jorani-leave-management-system-0-6-5-sql-injection/ - https://www.exploit-db.com/exploits/45340/ - https://github.com/bbalet/jorani/issues/254
CVE ID: CVE-2018-15919 State: PUBLISHED Published: 2018-08-28T08:00:00 Last Updated: 2024-08-05T10:10:05.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.' Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181221-0001/ - http://www.securityfocus.com/bid/105163 - http://seclists.org/oss-sec/2018/q3/180
CVE ID: CVE-2018-15920 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:04.920Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html - http://www.securityfocus.com/bid/105441
CVE ID: CVE-2018-15921 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15922 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:05.591Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - http://www.securityfocus.com/bid/105439 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE ID: CVE-2018-15923 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:05.535Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - http://www.securityfocus.com/bid/105439 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE ID: CVE-2018-15924 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:05.328Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html - http://www.securityfocus.com/bid/105441
CVE ID: CVE-2018-15925 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:05.967Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - http://www.securityfocus.com/bid/105439 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE ID: CVE-2018-15926 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:04.923Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - http://www.securityfocus.com/bid/105439 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE ID: CVE-2018-15927 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:04.948Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds read Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - http://www.securityfocus.com/bid/105439 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html - https://research.checkpoint.com/2018/50-adobe-cves
CVE ID: CVE-2018-15928 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:04.906Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds write Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html - http://www.securityfocus.com/bid/105432 - https://research.checkpoint.com/2018/50-adobe-
CVE ID: CVE-2018-15929 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:04.883Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-bounds write Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html - http://www.securityfocus.com/bid/105432 - https://research.checkpoint.com/2018/50-adobe-
CVE ID: CVE-2018-15930 State: PUBLISHED Published: 2018-10-12T18:00:00 Last Updated: 2024-08-05T10:10:05.321Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Untrusted pointer dereference Description: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041809 - http://www.securityfocus.com/bid/105442 - https://helpx.adobe.com/security/products/acrobat/apsb18-30.html - https://research.checkpoin