Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-7830 State: PUBLISHED Published: 2019-05-22T17:41:40 Last Updated: 2024-08-04T21:02:18.727Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.zeroda
/helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.zerodayinitiative.com/advisories/ZDI-19-514/
CVE ID: CVE-2019-7831 State: PUBLISHED Published: 2019-05-22T17:42:47 Last Updated: 2024-08-04T21:02:18.557Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.talosi
/helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0796
CVE ID: CVE-2019-7832 State: PUBLISHED Published: 2019-05-22T17:58:17 Last Updated: 2024-08-04T21:02:18.947Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Heap Overflow Description: Adobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2017.011.30142 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution . Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-41.html
CVE ID: CVE-2019-7833 State: PUBLISHED Published: 2019-05-22T17:59:29 Last Updated: 2024-08-04T21:02:19.167Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320
CVE ID: CVE-2019-7834 State: PUBLISHED Published: 2019-05-22T18:01:01 Last Updated: 2024-08-04T21:02:18.746Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108461
CVE ID: CVE-2019-7835 State: PUBLISHED Published: 2019-05-22T18:01:57 Last Updated: 2024-08-04T21:02:18.639Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Use After Free Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108320
CVE ID: CVE-2019-7836 State: PUBLISHED Published: 2019-05-22T18:04:12 Last Updated: 2024-08-04T21:02:18.692Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Read Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108326
CVE ID: CVE-2019-7837 State: PUBLISHED Published: 2019-05-22T18:08:08 Last Updated: 2024-08-04T21:02:18.967Z Vendors: Adobe Products: Adobe Flash Player Problem Types: Use After Free Description: Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/flash-player/apsb19-26.html - http://www.securityfocus.com/bid/108312 - https://www.zerodayinitiative.com/advisories/ZDI-19-498/ - https://access.redhat.com/errata/RHSA-2019:1234
CVE ID: CVE-2019-7838 State: PUBLISHED Published: 2019-06-12T15:13:45 Last Updated: 2024-08-04T21:02:18.936Z Vendors: Adobe Products: ColdFusion Problem Types: File extension blacklist bypass Description: ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/coldfusion/apsb19-27.html
CVE ID: CVE-2019-7839 State: PUBLISHED Published: 2019-06-12T15:14:04 Last Updated: 2024-08-04T21:02:19.014Z Vendors: Adobe Products: ColdFusion Problem Types: Command Injection Description: ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/coldfusion/apsb19-27.html - https://seclists.org/bugtraq/2019/Jun/38 - http://packetstormsecurity.com/files/153439/Coldfusion-JNBridge-Remote-Code-Execution.html
CVE ID: CVE-2019-7840 State: PUBLISHED Published: 2019-06-12T15:14:22 Last Updated: 2024-08-04T21:02:19.046Z Vendors: Adobe Products: ColdFusion Problem Types: Deserialization of untrusted data Description: ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/coldfusion/apsb19-27.html
CVE ID: CVE-2019-7841 State: PUBLISHED Published: 2019-05-22T18:05:10 Last Updated: 2024-08-04T21:02:18.588Z Vendors: Adobe Products: Adobe Acrobat and Reader Problem Types: Out-of-Bounds Read Description: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb19-18.html - http://www.securityfocus.com/bid/108326
CVE ID: CVE-2019-7842 State: PUBLISHED Published: 2019-05-22T18:14:18 Last Updated: 2024-08-04T21:02:18.638Z Vendors: Adobe Products: Adobe Media Encoder Problem Types: Use-After-Free Description: Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation could lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/media-encoder/apsb19-29.html - http://www.securityfocus.com/bid/108317 - https://www.zerodayinitiative.com/advisories/ZDI-19-477/
CVE ID: CVE-2019-7843 State: PUBLISHED Published: 2019-07-18T21:46:01 Last Updated: 2024-08-04T21:02:18.934Z Vendors: n/a Products: Adobe Campaign Problem Types: Insufficient input validation Description: Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/campaign/apsb19-28.html
CVE ID: CVE-2019-7844 State: PUBLISHED Published: 2019-05-22T18:16:18 Last Updated: 2024-08-04T21:02:19.004Z Vendors: Adobe Products: Adobe Media Encoder Problem Types: Out-of-bounds Read Description: Adobe Media Encoder version 13.0.2 has an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/media-encoder/apsb19-29.html - http://www.securityfocus.com/bid/108318 - https://www.zerodayinitiative.com/advisories/ZDI-19-476/
CVE ID: CVE-2019-7845 State: PUBLISHED Published: 2019-06-12T15:14:42 Last Updated: 2024-08-04T21:02:18.609Z Vendors: Adobe Products: Adobe Flash Player Problem Types: Use After Free Description: Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/flash-player/apsb19-30.html - https://access.redhat.com/errata/RHSA-2019:1476 - https://security.gentoo.org/glsa/201908-21
CVE ID: CVE-2019-7846 State: PUBLISHED Published: 2019-07-18T21:45:00 Last Updated: 2024-08-04T21:02:18.575Z Vendors: n/a Products: Adobe Campaign Problem Types: Improper error handling Description: Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/campaign/apsb19-28.html
CVE ID: CVE-2019-7847 State: PUBLISHED Published: 2019-07-18T21:44:23 Last Updated: 2024-08-04T21:02:18.996Z Vendors: n/a Products: Adobe Campaign Problem Types: Improper Restriction of XML External Entity Reference ('XXE') Description: Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/campaign/apsb19-28.html
CVE ID: CVE-2019-7848 State: PUBLISHED Published: 2019-07-18T21:43:49 Last Updated: 2024-08-04T21:02:18.850Z Vendors: n/a Products: Adobe Campaign Problem Types: Inadequate access control Description: Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/campaign/apsb19-28.html
CVE ID: CVE-2019-7849 State: PUBLISHED Published: 2019-08-02T21:10:02 Last Updated: 2024-08-04T21:02:18.737Z Vendors: n/a Products: Magento 1 Magento 2 Problem Types: Inadequate Session Handling Description: A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
CVE ID: CVE-2019-7850 State: PUBLISHED Published: 2019-07-18T21:43:25 Last Updated: 2024-08-04T21:02:18.700Z Vendors: n/a Products: Adobe Campaign Problem Types: Command injection Description: Adobe Campaign Classic version 18.10.5-8984 and earlier versions have a Command injection vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/campaign/apsb19-28.html
CVE ID: CVE-2019-7851 State: PUBLISHED Published: 2019-08-02T21:10:29 Last Updated: 2024-08-04T21:02:18.532Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Request Forgery Description: A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
CVE ID: CVE-2019-7852 State: PUBLISHED Published: 2019-08-02T21:10:58 Last Updated: 2024-08-04T21:02:19.227Z Vendors: n/a Products: Magento 2 Problem Types: Admin Panel Path Disclosure Description: A path disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Requests for a specific file path could result in a redirect to the URL of the Magento admin panel, disclosing its location to potentially unauthorized parties. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
CVE ID: CVE-2019-7853 State: PUBLISHED Published: 2019-08-02T21:36:58 Last Updated: 2024-08-04T21:02:19.098Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to the tax notifications configuration in the Magento admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-24
CVE ID: CVE-2019-7854 State: PUBLISHED Published: 2019-08-02T21:11:32 Last Updated: 2024-08-04T21:02:18.996Z Vendors: n/a Products: Magento 2 Problem Types: Insecure Direct Object Reference Description: An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unauthorized disclosure of company credit history details. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
CVE ID: CVE-2019-7855 State: PUBLISHED Published: 2019-08-02T21:11:55 Last Updated: 2024-08-04T21:02:19.005Z Vendors: n/a Products: Magento 2 Problem Types: Cryptographic Flaw Description: A cryptograhic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could be abused by an unauthenticated user to discover an invariant used in gift card generation. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
CVE ID: CVE-2019-7857 State: PUBLISHED Published: 2019-08-02T21:12:21 Last Updated: 2024-08-04T21:02:18.975Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Request Forgery Description: A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a shopper's cart due to an insufficiently robust anti-CSRF token implementation. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
CVE ID: CVE-2019-7858 State: PUBLISHED Published: 2019-08-02T21:12:47 Last Updated: 2024-08-04T21:02:19.176Z Vendors: n/a Products: Magento 2 Problem Types: Cryptographic Flaw Description: A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensitive information with an algorithm that is insufficiently resistant to brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
CVE ID: CVE-2019-7859 State: PUBLISHED Published: 2019-08-02T21:13:08 Last Updated: 2024-08-04T21:02:18.966Z Vendors: n/a Products: Magento 2 Problem Types: Path Traversal Description: A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in unauthorized access to uploaded images due to insufficient access control. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-24
CVE ID: CVE-2019-7860 State: PUBLISHED Published: 2019-08-02T21:13:27 Last Updated: 2024-08-04T21:02:19.170Z Vendors: n/a Products: Magento 2 Problem Types: Cryptographic Flaw Description: A cryptographically weak pseudo-rando number generator is used in multiple security relevant contexts in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
CVE ID: CVE-2019-7861 State: PUBLISHED Published: 2019-08-02T21:13:46 Last Updated: 2024-08-04T21:02:19.058Z Vendors: n/a Products: Magento 2 Problem Types: Insufficient Input Validation Description: Insufficient server-side validation of user input could allow an attacker to bypass file upload restrictions in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
CVE ID: CVE-2019-7862 State: PUBLISHED Published: 2019-08-02T21:14:09 Last Updated: 2024-08-04T21:02:19.129Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Scripting Description: A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
CVE ID: CVE-2019-7863 State: PUBLISHED Published: 2019-08-02T21:14:29 Last Updated: 2024-08-04T21:02:19.040Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting vulnerability exists in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to products and categories. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
CVE ID: CVE-2019-7864 State: PUBLISHED Published: 2019-08-02T21:14:48 Last Updated: 2024-08-04T21:02:19.127Z Vendors: n/a Products: Magento 2 Problem Types: Insecure Direct Object Reference Description: An insecure direct object reference (IDOR) vulnerability exists in the RSS feeds of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
CVE ID: CVE-2019-7865 State: PUBLISHED Published: 2019-08-02T21:15:08 Last Updated: 2024-08-04T21:02:18.914Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Request Forgery Description: A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
CVE ID: CVE-2019-7866 State: PUBLISHED Published: 2019-08-02T21:15:32 Last Updated: 2024-08-04T21:02:19.057Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to edit Product information via the TinyMCE editor. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
CVE ID: CVE-2019-7867 State: PUBLISHED Published: 2019-08-02T21:15:50 Last Updated: 2024-08-04T21:02:19.250Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
CVE ID: CVE-2019-7868 State: PUBLISHED Published: 2019-08-02T21:16:13 Last Updated: 2024-08-04T21:02:19.091Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with permissions to manage tax rules. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
CVE ID: CVE-2019-7869 State: PUBLISHED Published: 2019-08-02T21:16:41 Last Updated: 2024-08-04T21:02:18.959Z Vendors: n/a Products: Magento 2 Problem Types: Cross-Site Scripting Description: A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with permissions to manage customer groups. Additional Analyst Notes: - CVE Program Container: References: - https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
CVE ID: CVE-2019-7870 State: PUBLISHED Published: 2019-08-14T14:45:06 Last Updated: 2024-08-04T21:02:19.065Z Vendors: Adobe Products: Adobe Character Animator Problem Types: Insecure Library Loading (DLL hijacking) Description: Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/character_animator/apsb19-32.html