deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-2005
Published: 2019-05-20
Description: IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions. IBM X-Force ID: 155007
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/155007; https://www.ibm.com/support/docview.wss?uid=ibm10881996; https://exchange.xforce.ibmcloud.com/vulnerabilities/155007
CVE: CVE-2019-4011
Published: 2019-05-20
Description: IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155885.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/155885; https://www.ibm.com/support/docview.wss?uid=ibm10881996; https://exchange.xforce.ibmcloud.com/vulnerabilities/155885
CVE: CVE-2019-4058
Published: 2019-05-20
Description: IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to administrators. IBM X-Force ID: 156570.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1021
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/156570; https://www.ibm.com/support/docview.wss?uid=ibm10881996; https://exchange.xforce.ibmcloud.com/vulnerabilities/156570
CVE: CVE-2019-4293
Published: 2019-05-20
Description: IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/108445; https://exchange.xforce.ibmcloud.com/vulnerabilities/160699; https://www.ibm.com/support/docview.wss?uid=ibm10884656
CVE: CVE-2019-8352
Published: 2019-05-20
Description: By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use them to execute code or escalate privileges on the network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.securifera.com/advisories/CVE-2019-8352/; https://www.securifera.com/advisories/CVE-2019-8352/
CVE: CVE-2019-12239
Published: 2019-05-20
Description: The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-352
References: http://dumpco.re/bugs/wp-plugin-wp-booking-system-sqli; https://wordpress.org/plugins/wp-booking-system/#developers; https://wpvulndb.com/vulnerabilities/9284
CVE: CVE-2019-12240
Published: 2019-05-20
Description: The Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or c_values in graph.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://dumpco.re/bugs/wp-plugin-virim-id; https://wpvulndb.com/vulnerabilities/9291; https://dumpco.re/bugs/wp-plugin-virim-id
CVE: CVE-2019-12241
Published: 2019-05-20
Description: The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://dumpco.re/bugs/wp-plugin-carts-guru-id; https://wpvulndb.com/vulnerabilities/9292; http://dumpco.re/bugs/wp-plugin-carts-guru-id
CVE: CVE-2019-10076
Published: 2019-05-20
Description: A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/05/19/4; http://www.securityfocus.com/bid/108437; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10076
CVE: CVE-2019-10077
Published: 2019-05-20
Description: A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/05/19/5; http://www.securityfocus.com/bid/108437; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10077
CVE: CVE-2019-10078
Published: 2019-05-20
Description: A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/05/19/6; http://www.securityfocus.com/bid/108437; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10078
CVE: CVE-2019-11816
Published: 2019-05-20
Description: Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.
CVSS Score: 7.2 (HIGH)
References: https://forum.opnsense.org/index.php?topic=12787.0; https://www.netgate.com/blog/pfsense-2-4-4-release-p3-now-available.html; https://forum.opnsense.org/index.php?topic=12787.0
CVE: CVE-2019-10319
Published: 2019-05-21
Description: A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpl#doTest allowed users with Overall/Read permission to obtain limited information about the file /etc/shadow and the user Jenkins is running as.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/05/21/1; https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1316; http://www.openwall.com/lists/oss-security/2019/05/21/1
CVE: CVE-2019-10320
Published: 2019-05-21
Description: Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-538
References: http://seclists.org/fulldisclosure/2019/May/39; http://www.openwall.com/lists/oss-security/2019/05/21/1; http://www.securityfocus.com/bid/108462
CVE: CVE-2019-12250
Published: 2019-05-21
Description: IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, which can be triggered by viewing a log. NOTE: the software maintainer disputes that this is a vulnerability because the request logger is not part of IdentityServer but only our development test host
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/IdentityServer/IdentityServer4/issues/3279; https://github.com/IdentityServer/IdentityServer4/issues/3279
CVE: CVE-2019-12251
Published: 2019-05-21
Description: sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/f1tz/CVE_Request/tree/master/UCMS/SQLi; https://github.com/f1tz/CVE_Request/tree/master/UCMS/SQLi
CVE: CVE-2019-12253
Published: 2019-05-21
Description: my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/ilosuna/mylittleforum/issues/468; https://github.com/ilosuna/mylittleforum/releases/tag/2.4.20; https://github.com/ilosuna/mylittleforum/issues/468
CVE: CVE-2019-12189
Published: 2019-05-21
Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/153028/Zoho-ManageEngine-ServiceDesk-Plus-9.3-Cross-Site-Scripting.html; https://github.com/tuyenhva/CVE-2019-12189; https://www.manageengine.com/products/service-desk/readme.html
CVE: CVE-2019-12190
Published: 2019-05-21
Description: XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or filename parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/tuyenhva/CVE-2019-12190; https://github.com/tuyenhva/CVE-2019-12190
CVE: CVE-2019-12252
Published: 2019-05-21
Description: In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail&notifyTo=SOLFORWARD&id= substring.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: http://packetstormsecurity.com/files/153029/Zoho-ManageEngine-ServiceDesk-Plus-Privilege-Escalation.html; http://www.securityfocus.com/bid/108456; https://github.com/tuyenhva/CVE-2019-12252
CVE: CVE-2019-12269
Published: 2019-05-21
Description: Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00061.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVNTEF3WSOOQYKMIPEH7F77UPXES5BU5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYWBJHSBBLAHKMRWDWH2XXQDYAGDHB5I/
CVE: CVE-2019-12270
Published: 2019-05-21
Description: OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. During installation, a displaylistcache file share is created on the Windows server with full read and write permissions for the Everyone group at both the NTFS and Share levels. The share is used to retrieve documents for processing, and to store processed documents for display in the browser. The only required share level access is read/write by the JobProcessor service account. At the local filesystem level, the only additional required permissions would be read/write from the servlet engine, such as Tomcat. (The affected server components are not installed with Content Server by default, and must be installed separately.) NOTE: the vendor's position is that customers are not supposed to use this default setting without consulting the documentation.
CVSS Score: 7.4 (HIGH)
CWE: CWE-732
References: https://packetstormsecurity.com/files/150125/Brava-Enterprise-Server-16.4-Information-Disclosure.html; https://packetstormsecurity.com/files/150125/Brava-Enterprise-Server-16.4-Information-Disclosure.html
CVE: CVE-2019-6513
Published: 2019-05-21
Description: An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6513; https://www.excellium-services.com/cert-xlm-advisory; https://www.excellium-services.com/cert-xlm-advisory/cve-2019-6513/
CVE: CVE-2019-10066
Published: 2019-05-22
Description: An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x through 5.0.12. An attacker who is logged into OTRS as an agent with appropriate permissions may create a carefully crafted calendar appointment in order to cause execution of JavaScript in the context of OTRS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://community.otrs.com/security-advisory-2019-06-security-update-for-otrs-framework/; https://community.otrs.com/security-advisory-2019-06-security-update-for-otrs-framework/
CVE: CVE-2019-10067
Published: 2019-05-22
Description: An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17. An attacker who is logged into OTRS as an agent user with appropriate permissions may manipulate the URL to cause execution of JavaScript in the context of OTRS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
CVE: CVE-2019-9892
Published: 2019-05-22
Description: An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-91
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
CVE: CVE-2019-7140
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-479/
CVE: CVE-2016-10750
Published: 2019-05-22
Description: In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://access.redhat.com/errata/RHSA-2019:2413; https://github.com/hazelcast/hazelcast/issues/8024; https://github.com/hazelcast/hazelcast/pull/12230
CVE: CVE-2019-7141
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-478/
CVE: CVE-2019-7142
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108326
CVE: CVE-2019-7143
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-480/
CVE: CVE-2019-7144
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-481/
CVE: CVE-2019-7145
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-485/
CVE: CVE-2019-7758
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier version, 2[PII_REDACTED]8 and earlier version, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-482/
CVE: CVE-2019-7759
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-483/
CVE: CVE-2019-7760
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-484/
CVE: CVE-2019-7761
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0778
CVE: CVE-2019-7762
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7763
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7764
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier version, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7765
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7766
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7767
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7768
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html
CVE: CVE-2019-7769
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108326