deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-30673
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-30674
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GSVZN3IJ6OCPSJL7AEX3ZHSHAHFOGESK/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQB6FJAM5YQ35SF5B2MN25Y2FX56EOEZ/
CVE: CVE-2022-30675
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-30676
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-30677
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-30678
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-30680
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-30681
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-30682
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-30683
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a Violation of Secure Design Principles vulnerability that could lead to bypass the security feature of the encryption mechanism in the backend . An attacker could leverage this vulnerability to decrypt secrets, however, this is a high-complexity attack as the threat actor needs to already possess those secrets. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-657
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-30684
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-30685
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-30686
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-34218
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-35664
Published: 2022-09-16
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-35713
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38401
Published: 2022-09-16
Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/incopy/apsb22-53.html; https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE: CVE-2022-38402
Published: 2022-09-16
Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/incopy/apsb22-53.html; https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE: CVE-2022-38403
Published: 2022-09-16
Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/incopy/apsb22-53.html; https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE: CVE-2022-38404
Published: 2022-09-16
Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/incopy/apsb22-53.html; https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE: CVE-2022-38405
Published: 2022-09-16
Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/incopy/apsb22-53.html; https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE: CVE-2022-38406
Published: 2022-09-16
Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/incopy/apsb22-53.html; https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE: CVE-2022-38407
Published: 2022-09-16
Description: Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/incopy/apsb22-53.html; https://helpx.adobe.com/security/products/incopy/apsb22-53.html
CVE: CVE-2022-38413
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-38414
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-38415
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-38416
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-38417
Published: 2022-09-16
Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb22-50.html; https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE: CVE-2022-38426
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38427
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38428
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38429
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38430
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38431
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38432
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38433
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.sue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38434
Published: 2022-09-16
Description: Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/photoshop/apsb22-52.html; https://helpx.adobe.com/security/products/photoshop/apsb22-52.html
CVE: CVE-2022-38978
Published: 2022-09-16
Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2022-38979
Published: 2022-09-16
Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2022-38987
Published: 2022-09-16
Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/9/
CVE: CVE-2022-38988
Published: 2022-09-16
Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2022/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2022/9/