deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12279
Published: 2019-05-22
Description: Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). NOTE: The vendor disputes this issues as not being a vulnerability because the issue does not seem to be a legitimate SQL Injection. The POC does not show any valid injection that can be done with the variable provided, and while the username value being passed does get used in a SQL query, it is passed through SQL escaping functions when creating the call. The vendor tried re-creating the issue with no luck
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/153040/Nagios-XI-5.6.1-SQL-Injection.html; http://www.securityfocus.com/bid/108446; https://github.com/JameelNabbo/exploits/blob/master/nagiosxi%20username%20sql%20injection.txt
CVE: CVE-2019-7805
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7806
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7807
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7808
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108320
CVE: CVE-2019-7809
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-500/
CVE: CVE-2019-7810
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-499/
CVE: CVE-2019-7811
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108326
CVE: CVE-2019-7812
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108326
CVE: CVE-2019-7813
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; http://www.securityfocus.com/bid/108326
CVE: CVE-2019-7814
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-501/
CVE: CVE-2019-7817
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-502/
CVE: CVE-2019-7820
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: http://www.securityfocus.com/bid/108315; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-504/
CVE: CVE-2019-11634
Published: 2019-05-22
Description: Citrix Workspace App before 1904 for Windows has Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://support.citrix.com/article/CTX251986; https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin; https://support.citrix.com/article/CTX251986
CVE: CVE-2019-11841
Published: 2019-05-22
Description: A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP Message Format specification in RFC 4880 chapter 7, a cleartext signed message can contain one or more optional "Hash" Armor Headers. The "Hash" Armor Header specifies the message digest algorithm(s) used for the signature. However, the Go clearsign package ignores the value of this header, which allows an attacker to spoof it. Consequently, an attacker can lead a victim to believe the signature was generated using a different message digest algorithm than what was actually used. Moreover, since the library skips Armor Header parsing in general, an attacker can not only embed arbitrary Armor Headers, but also prepend arbitrary text to cleartext messages without invalidating the signatures.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: http://packetstormsecurity.com/files/152840/Go-Cryptography-Libraries-Cleartext-Message-Spoofing.html; https://go.googlesource.com/crypto/; https://lists.debian.org/debian-lts-announce/2019/09/msg00011.html
CVE: CVE-2017-6514
Published: 2019-05-22
Description: WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/108459; https://github.com/CFSECURITE/wordpress; https://web.archive.org/web/[PII_REDACTED]5401/https://github.com/CFSECURITE/wordpress
CVE: CVE-2018-14729
Published: 2019-05-22
Description: The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://discuz.com; http://tencent.com; http://www.cnvd.org.cn/flaw/show/CNVD-2018-17059
CVE: CVE-2018-7202
Published: 2019-05-22
Description: An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.projectsend.org/change-log-detail/r1053/; https://www.projectsend.org/change-log-detail/r1053/
CVE: CVE-2019-10132
Published: 2019-05-22
Description: A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-264
References: https://access.redhat.com/errata/RHSA-2019:1264; https://access.redhat.com/errata/RHSA-2019:1268; https://access.redhat.com/errata/RHSA-2019:1455
CVE: CVE-2019-11231
Published: 2019-05-22
Description: An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). This vulnerability is triggered by an authenticated user; however, authentication can be bypassed. According to the official documentation for installation step 10, an admin is required to upload all the files, including the .htaccess files, and run a health check. However, what is overlooked is that the Apache HTTP Server by default no longer enables the AllowOverride directive, leading to data/users/admin.xml password exposure. The passwords are hashed but this can be bypassed by starting with the data/other/authorization.xml API key. This allows one to target the session state, since they decided to roll their own implementation. The cookie_name is crafted information that can be leaked from the frontend (site name and version). If a someone leaks the API key and the admin username, then they can bypass authentication. To do so, they need to supply a cookie based on an SHA-1 computation of this known information. The vulnerability exists in the admin/theme-edit.php file. This file checks for forms submissions via POST requests, and for the csrf nonce. If the nonce sent is correct, then the file provided by the user is uploaded. There is a path traversal allowing write access outside the jailed themes directory root. Exploiting the traversal is not necessary because the .htaccess file is ignored. A contributing factor is that there isn't another check on the extension before saving the file, with the assumption that the parameter content is safe. This allows the creation of web accessible and executable files with arbitrary content.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://packetstormsecurity.com/files/152961/GetSimpleCMS-3.3.15-Remote-Code-Execution.html; https://ssd-disclosure.com/?p=3899&preview=true; http://packetstormsecurity.com/files/152961/GetSimpleCMS-3.3.15-Remote-Code-Execution.html
CVE: CVE-2019-11536
Published: 2019-05-22
Description: Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0, 3.1.16, 3.2.3, 3.2.6, 3.5.0, 3.6.0, and 3.6.1, when WebHMI is not installed, allows an attacker to inject client-side commands or scripts to be executed on the device with privileged access, aka CYB/2019/19561. The attack requires network connectivity to the device and exploits the webserver interface, typically through a browser.
CVSS Score: 9.8 (CRITICAL)
References: https://www.kalkitech.com/cybersecurity/; https://www.kalkitech.com/wp-content/uploads/CYB_19561_Advisory.pdf; https://www.kalkitech.com/cybersecurity/
CVE: CVE-2019-12167
Published: 2019-05-22
Description: httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108420; https://seclists.org/bugtraq/2019/May/51; https://www.emerson.com/en-us/support
CVE: CVE-2019-3401
Published: 2019-05-22
Description: The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://jira.atlassian.com/browse/JRASERVER-69244; https://jira.atlassian.com/browse/JRASERVER-69244
CVE: CVE-2019-3402
Published: 2019-05-22
Description: The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-69243; https://jira.atlassian.com/browse/JRASERVER-69243
CVE: CVE-2019-3403
Published: 2019-05-22
Description: The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://jira.atlassian.com/browse/JRASERVER-69242; https://jira.atlassian.com/browse/JRASERVER-69242
CVE: CVE-2019-5625
Published: 2019-05-22
Description: The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the legitimate user by reusing the stored OAuth token, thus allowing them to view and change the user's personal information stored in the backend cloud service. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app.
CVSS Score: 7.1 (HIGH)
CWE: CWE-922, CWE-522
References: https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/CVE-2019-5625-Halo-home-smart-lighting-vulnerability-advisory.pdf; https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/
CVE: CVE-2019-5626
Published: 2019-05-22
Description: The Android mobile application BlueCats Reveal before 3.0.19 stores the username and password in a clear text file. This file persists until the user logs out or the session times out from non-usage (30 days of no user activity). This can allow an attacker to compromise the affected BlueCats network implementation. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-922, CWE-522
References: https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/; https://play.google.com/store/apps/details?id=com.bluecats.bcreveal; https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/
CVE: CVE-2019-5627
Published: 2019-05-22
Description: The iOS mobile application BlueCats Reveal before 5.14 stores the username and password in the app cache as base64 encoded strings, i.e. clear text. These persist in the cache even if the user logs out. This can allow an attacker to compromise the affected BlueCats network implementation. The attacker would first need to gain physical control of the iOS device or compromise it with a malicious app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-922, CWE-522
References: https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/; https://itunes.apple.com/us/app/bc-reveal/id852676494; https://blog.rapid7.com/2019/05/21/investigating-the-plumbing-of-the-iot-ecosystem-r7-2018-65-r7-2019-07-fixed/
CVE: CVE-2019-7818
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108322; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-503/
CVE: CVE-2019-7821
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-506/
CVE: CVE-2019-7822
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108322; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-505/
CVE: CVE-2019-7823
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier version, 2[PII_REDACTED]8 and earlier version, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/108320; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-507/
CVE: CVE-2019-7824
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108323; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-508/
CVE: CVE-2019-7825
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108322; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-509/
CVE: CVE-2019-7826
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108326; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-510/
CVE: CVE-2019-7827
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108325; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-513/
CVE: CVE-2019-7828
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108325; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-512/
CVE: CVE-2019-7829
Published: 2019-05-22
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]9 and earlier, 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108322; https://helpx.adobe.com/security/products/acrobat/apsb19-18.html; https://www.zerodayinitiative.com/advisories/ZDI-19-511/