deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-2170
Published: 2020-03-25
Description: Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote server, resulting in a stored XSS vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/03/25/2; https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1676; http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE: CVE-2020-2171
Published: 2020-03-25
Description: Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2020/03/25/2; https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1677; http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE: CVE-2019-18626
Published: 2020-03-25
Description: Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thus exposing sensitive information including employee tax information, social security numbers, home addresses, and more.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0011/FEYE-2019-0011.md; https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0011/FEYE-2019-0011.md
CVE: CVE-2020-3766
Published: 2020-03-25
Description: Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://helpx.adobe.com/security/products/integrity_service/apsb20-12.html; https://www.zerodayinitiative.com/advisories/ZDI-20-372/; https://helpx.adobe.com/security/products/integrity_service/apsb20-12.html
CVE: CVE-2020-3800
Published: 2020-03-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]0 and earlier have a memory address leak vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://helpx.adobe.com/security/products/acrobat/apsb20-13.html; https://helpx.adobe.com/security/products/acrobat/apsb20-13.html
CVE: CVE-2020-3801
Published: 2020-03-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]0 and earlier have a use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-13.html; https://helpx.adobe.com/security/products/acrobat/apsb20-13.html
CVE: CVE-2020-3802
Published: 2020-03-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]0 and earlier have a use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-13.html; https://helpx.adobe.com/security/products/acrobat/apsb20-13.html
CVE: CVE-2020-3803
Published: 2020-03-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]0 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/acrobat/apsb20-13.html; https://helpx.adobe.com/security/products/acrobat/apsb20-13.html
CVE: CVE-2020-3804
Published: 2020-03-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]0 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb20-13.html; https://helpx.adobe.com/security/products/acrobat/apsb20-13.html
CVE: CVE-2020-3805
Published: 2020-03-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]0 and earlier have a use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-13.html; https://helpx.adobe.com/security/products/acrobat/apsb20-13.html
CVE: CVE-2020-3806
Published: 2020-03-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]0 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb20-13.html; https://helpx.adobe.com/security/products/acrobat/apsb20-13.html
CVE: CVE-2020-3807
Published: 2020-03-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]4 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]0 and earlier have a buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://helpx.adobe.com/security/products/acrobat/apsb20-13.html; https://helpx.adobe.com/security/products/acrobat/apsb20-13.html
CVE: CVE-2020-5280
Published: 2020-03-25
Description: http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService and org.http4s.server.staticcontent.WebjarService. URI normalization is applied incorrectly. Requests whose path info contain ../ or // can expose resources outside of the configured location. This issue is patched in versions 0.18.26, 0.20.20, and 0.21.2. Note that 0.19.0 is a deprecated release and has never been supported.
CVSS Score: 7.6 (HIGH)
CWE: CWE-23, CWE-22
References: https://github.com/http4s/http4s/commit/250afddbb2e65b70ca9ddaec9d1eb3aaa56de7ec; https://github.com/http4s/http4s/commit/752b3f63a05a31d2de4f8706877aa08d6b89efca; https://github.com/http4s/http4s/commit/b87f31b2292dabe667bec3b04ce66176c8a3e17b
CVE: CVE-2020-5281
Published: 2020-03-25
Description: In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-90, CWE-732
References: https://github.com/CESNET/perun/commit/ac527bc3225a64208ee5cee59e5918ee360ca039; https://github.com/CESNET/perun/pull/2635; https://github.com/CESNET/perun/security/advisories/GHSA-gj88-9q3f-72m3
CVE: CVE-2020-5277
Published: 2020-03-25
Description: PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/PrestaShop/ps_facetedsearch/commit/c792ddcdd84ec208a6dfa4a30fd66d8bc9863f4a; https://github.com/PrestaShop/ps_facetedsearch/security/advisories/GHSA-mmmv-m5q9-g3cm; https://github.com/PrestaShop/ps_facetedsearch/commit/c792ddcdd84ec208a6dfa4a30fd66d8bc9863f4a
CVE: CVE-2020-5282
Published: 2020-03-25
Description: In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software package. This allows arbitrary shell execution,which can compromise the bot This is patched in version 1.0.0-beta
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/Assfugil/nickchanbot/commit/d7dc87523fc8bb6babbf8d636c339193b236a3ba; https://github.com/Assfugil/nickchanbot/security/advisories/GHSA-8xwp-r7pj-cgw3; https://github.com/Assfugil/nickchanbot/commit/d7dc87523fc8bb6babbf8d636c339193b236a3ba
CVE: CVE-2020-3761
Published: 2020-03-25
Description: ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory.
CVSS Score: 7.5 (HIGH)
References: https://helpx.adobe.com/security/products/coldfusion/apsb20-16.html; https://helpx.adobe.com/security/products/coldfusion/apsb20-16.html
CVE: CVE-2020-3769
Published: 2020-03-25
Description: Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-15.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-15.html
CVE: CVE-2020-3794
Published: 2020-03-25
Description: ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-829
References: https://helpx.adobe.com/security/products/coldfusion/apsb20-16.html; https://helpx.adobe.com/security/products/coldfusion/apsb20-16.html
CVE: CVE-2020-3808
Published: 2020-03-25
Description: Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition vulnerability. Successful exploitation could lead to arbitrary file deletion.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-367
References: https://helpx.adobe.com/security/products/creative-cloud/apsb20-11.html; https://helpx.adobe.com/security/products/creative-cloud/apsb20-11.html
CVE: CVE-2020-9551
Published: 2020-03-25
Description: Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-17.html; https://helpx.adobe.com/security/products/bridge/apsb20-17.html
CVE: CVE-2020-9552
Published: 2020-03-25
Description: Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-17.html; https://helpx.adobe.com/security/products/bridge/apsb20-17.html
CVE: CVE-2020-10881
Published: 2020-03-25
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9660.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-20-333/; https://www.zerodayinitiative.com/advisories/ZDI-20-333/
CVE: CVE-2020-10882
Published: 2020-03-25
Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP port 20002 by default. When parsing the slave_mac parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9650.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/157255/TP-Link-Archer-A7-C7-Unauthenticated-LAN-Remote-Code-Execution.html; https://www.zerodayinitiative.com/advisories/ZDI-20-334/; http://packetstormsecurity.com/files/157255/TP-Link-Archer-A7-C7-Unauthenticated-LAN-Remote-Code-Execution.html
CVE: CVE-2020-10883
Published: 2020-03-25
Description: This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the file system. The issue lies in the lack of proper permissions set on the file system. An attacker can leverage this vulnerability to escalate privileges. Was ZDI-CAN-9651.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: http://packetstormsecurity.com/files/157255/TP-Link-Archer-A7-C7-Unauthenticated-LAN-Remote-Code-Execution.html; https://www.zerodayinitiative.com/advisories/ZDI-20-335/; http://packetstormsecurity.com/files/157255/TP-Link-Archer-A7-C7-Unauthenticated-LAN-Remote-Code-Execution.html
CVE: CVE-2020-10884
Published: 2020-03-25
Description: This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP port 20002 by default. This issue results from the use of hard-coded encryption key. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-9652.
CVSS Score: 8.8 (HIGH)
CWE: CWE-321, CWE-798
References: http://packetstormsecurity.com/files/157255/TP-Link-Archer-A7-C7-Unauthenticated-LAN-Remote-Code-Execution.html; https://www.zerodayinitiative.com/advisories/ZDI-20-336/; http://packetstormsecurity.com/files/157255/TP-Link-Archer-A7-C7-Unauthenticated-LAN-Remote-Code-Execution.html
CVE: CVE-2020-10885
Published: 2020-03-25
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. The issue results from the lack of proper validation of DNS reponses prior to further processing. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the root user. Was ZDI-CAN-9661.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://www.zerodayinitiative.com/advisories/ZDI-20-337/; https://www.zerodayinitiative.com/advisories/ZDI-20-337/
CVE: CVE-2020-10886
Published: 2020-03-25
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port 20002. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9662.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-339/; https://www.zerodayinitiative.com/advisories/ZDI-20-339/
CVE: CVE-2020-10887
Published: 2020-03-25
Description: This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-9663.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-693
References: https://www.zerodayinitiative.com/advisories/ZDI-20-338/; https://www.zerodayinitiative.com/advisories/ZDI-20-338/
CVE: CVE-2020-10888
Published: 2020-03-25
Description: This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SSH port forwarding requests during initial setup. The issue results from the lack of proper authentication prior to establishing SSH port forwarding rules. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the WAN interface. Was ZDI-CAN-9664.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.zerodayinitiative.com/advisories/ZDI-20-340/; https://www.zerodayinitiative.com/advisories/ZDI-20-340/
CVE: CVE-2020-3770
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3771
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3772
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3773
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3774
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3775
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3776
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3777
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3778
Published: 2020-03-25
Description: Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3779
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3780
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3781
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3782
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3783
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
CVE: CVE-2020-3784
Published: 2020-03-25
Description: Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb20-14.html; https://helpx.adobe.com/security/products/photoshop/apsb20-14.html