deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-2244
Published: 2019-05-24
Description: Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearable in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2244; https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2244
CVE: CVE-2019-2245
Published: 2019-05-24
Description: Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2245; https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2245
CVE: CVE-2019-2247
Published: 2019-05-24
Description: Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE: CVE-2019-2248
Published: 2019-05-24
Description: Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 820, SD 820A, SD 845 / SD 850, SDM439, SDM660, SDX20
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/04/01/april-2019-code-aurora-security-bulletin
CVE: CVE-2019-2250
Published: 2019-05-24
Description: Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2250; https://www.qualcomm.com/company/product-security/bulletins#_CVE-2019-2250
CVE: CVE-2019-2726
Published: 2019-05-24
Description: Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Services Integration). The supported version that is affected is 12.3.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Ops Center. While the vulnerability is in Enterprise Manager Ops Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager Ops Center. CVSS 3.0 Base Score 6.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H).
CVSS Score: 6.3 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2019-8346
Published: 2019-05-24
Description: In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting (XSS) vulnerability allows for an unauthenticated manipulation of the JavaScript code by injecting the HTTP form parameter adscsrf. An attacker can use this to capture a user's AD self-service password reset and MFA token.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com/products/self-service-password/release-notes.html; https://www.manageengine.com/products/self-service-password/release-notes.html
CVE: CVE-2016-10751
Published: 2019-05-24
Description: osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&action=ajax_upload.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-434
References: https://blog.ripstech.com/2016/osclass-remote-code-execution-via-image-file/; https://demo.ripstech.com/projects/osclass_3.6.1; https://blog.ripstech.com/2016/osclass-remote-code-execution-via-image-file/
CVE: CVE-2016-10752
Published: 2019-05-24
Description: serendipity_moveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://blog.ripstech.com/2016/serendipity-from-file-upload-to-code-execution/; https://demo.ripstech.com/projects/serendipity_2.0.3; https://blog.ripstech.com/2016/serendipity-from-file-upload-to-code-execution/
CVE: CVE-2016-10753
Published: 2019-05-24
Description: e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://blog.ripstech.com/2016/e107-sql-injection-through-object-injection/; https://demo.ripstech.com/projects/e107_2.1.2; https://blog.ripstech.com/2016/e107-sql-injection-through-object-injection/
CVE: CVE-2016-10754
Published: 2019-05-24
Description: modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.ripstech.com/2016/vtiger-sql-injection/; https://demo.ripstech.com/projects/vtiger_6.5.0; https://blog.ripstech.com/2016/vtiger-sql-injection/
CVE: CVE-2016-10755
Published: 2019-05-24
Description: AbanteCart 1.2.8 allows SQL Injection via the source_language parameter to admin/controller/pages/localisation/language.php and core/lib/language_manager.php, or via POST data to admin/controller/pages/tool/backup.php and admin/model/tool/backup.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.ripstech.com/2016/abantecart-multiple-sql-injections/; https://demo.ripstech.com/projects/abantecart_1.2.8; https://blog.ripstech.com/2016/abantecart-multiple-sql-injections/
CVE: CVE-2016-10756
Published: 2019-05-24
Description: Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://blog.ripstech.com/2016/kliqqi-from-cross-site-request-forgery-to-code-execution/; https://demo.ripstech.com/projects/kliqqi_3.0.0.5; https://blog.ripstech.com/2016/kliqqi-from-cross-site-request-forgery-to-code-execution/
CVE: CVE-2016-10757
Published: 2019-05-24
Description: In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://blog.ripstech.com/2016/redaxo-remote-code-execution-via-csrf/; https://demo.ripstech.com/projects/redaxo_5.2.0; https://blog.ripstech.com/2016/redaxo-remote-code-execution-via-csrf/
CVE: CVE-2016-10758
Published: 2019-05-24
Description: PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the image_name parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://blog.ripstech.com/2016/phpkit-code-exection-for-privileged-users/; https://demo.ripstech.com/projects/phpkit_1.6.6; https://blog.ripstech.com/2016/phpkit-code-exection-for-privileged-users/
CVE: CVE-2016-10759
Published: 2019-05-24
Description: The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://blog.ripstech.com/2016/precurio-remote-command-execution-via-xinha-plugin/; https://demo.ripstech.com/projects/precurio_2.1; https://blog.ripstech.com/2016/precurio-remote-command-execution-via-xinha-plugin/
CVE: CVE-2017-18375
Published: 2019-05-24
Description: Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://fenceposterror.github.io/2017/06/16/Hacking-For-Fun-And-Non-Profit.html; https://fenceposterror.github.io/2017/06/16/Hacking-For-Fun-And-Non-Profit.html
CVE: CVE-2018-12624
Published: 2019-05-24
Description: An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eventum/eventum/blob/master/CHANGELOG.md; https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/blob/master/CHANGELOG.md
CVE: CVE-2018-17843
Published: 2019-05-24
Description: SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0 via the member/readmsg.php msg_id parameter, the member/tree.php pid parameter, or the member/downline.php m_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45511; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2019-10685
Published: 2019-05-24
Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/alt3kx/CVE-2019-10685; https://medium.com/%40alt3kx/a-reflected-xss-in-print-archive-system-v2015-release-2-6-cve-2019-10685-b60763b7768b; https://github.com/alt3kx/CVE-2019-10685
CVE: CVE-2019-7018
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7019
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7020
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7021
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7022
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7023
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7024
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7025
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7026
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7027
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7815
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]0 and earlier version, and 2[PII_REDACTED]5 and earlier have a data leakage (sensitive) vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
References: https://helpx.adobe.com/security/products/acrobat/apsb19-13.html; https://helpx.adobe.com/security/products/acrobat/apsb19-13.html
CVE: CVE-2019-7816
Published: 2019-05-24
Description: ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://helpx.adobe.com/security/products/coldfusion/apsb19-14.html; https://helpx.adobe.com/security/products/coldfusion/apsb19-14.html
CVE: CVE-2019-7028
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7029
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7030
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7031
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7032
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7033
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7034
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7035
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7036
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7037
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7038
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
CVE: CVE-2019-7039
Published: 2019-05-24
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]3 and earlier version, and 2[PII_REDACTED]4 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-07.html; https://helpx.adobe.com/security/products/acrobat/apsb19-07.html