deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15046
Published: 2020-06-24
Description: The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/config_user.cgi CSRF issue to add new admin users. The fixed versions are BIOS 3.2 and firmware 03.88.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/158373/SuperMicro-IPMI-03.40-Cross-Site-Request-Forgery.html; https://www.totalpentest.com/post/supermicro-ipmi-webgui-cross-site-request-forgery; http://packetstormsecurity.com/files/158373/SuperMicro-IPMI-03.40-Cross-Site-Request-Forgery.html
CVE: CVE-2020-5963
Published: 2020-06-25
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure.
CVSS Score: 7.8 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5031; https://usn.ubuntu.com/4404-1/; https://usn.ubuntu.com/4404-2/
CVE: CVE-2020-5964
Published: 2020-06-25
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the service host component, in which the application resources integrity check may be missed. Such an attack may lead to code execution, denial of service or information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-345
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5031; https://nvidia.custhelp.com/app/answers/detail/a_id/5038; https://nvidia.custhelp.com/app/answers/detail/a_id/5031
CVE: CVE-2020-5965
Published: 2020-06-25
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access, leading to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5031; https://nvidia.custhelp.com/app/answers/detail/a_id/5031
CVE: CVE-2019-20892
Published: 2020-06-25
Description: net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415
References: http://www.openwall.com/lists/oss-security/2020/06/25/4; https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1877027; https://bugzilla.redhat.com/show_bug.cgi?id=1663027
CVE: CVE-2020-15047
Published: 2020-06-25
Description: MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://bugs.kde.org/show_bug.cgi?id=423453; https://gerrit.vesnicky.cesnet.cz/r/1035; https://bugs.kde.org/show_bug.cgi?id=423453
CVE: CVE-2020-11735
Published: 2020-06-25
Description: The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/wolfSSL/wolfssl/commit/1de07da61f0c8e9926dcbd68119f73230dae283f; https://github.com/wolfSSL/wolfssl/releases/tag/v4.4.0-stable; https://github.com/wolfSSL/wolfssl/commit/1de07da61f0c8e9926dcbd68119f73230dae283f
CVE: CVE-2020-3963
Published: 2020-06-25
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be able to read privileged information contained in physical memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://packetstormsecurity.com/files/158459/VMware-ESXi-Use-After-Free-Out-Of-Bounds-Access.html; http://seclists.org/fulldisclosure/2020/Jul/22; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-3964
Published: 2020-06-25
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the EHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in the hypervisor's memory. Additional conditions beyond the attacker's control need to be present for exploitation to be possible.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-908
References: http://packetstormsecurity.com/files/158459/VMware-ESXi-Use-After-Free-Out-Of-Bounds-Access.html; http://seclists.org/fulldisclosure/2020/Jul/22; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-3965
Published: 2020-06-25
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the XHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://packetstormsecurity.com/files/158459/VMware-ESXi-Use-After-Free-Out-Of-Bounds-Access.html; http://seclists.org/fulldisclosure/2020/Jul/22; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-3966
Published: 2020-06-25
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a heap-overflow due to a race condition issue in the USB 2.0 controller (EHCI). A malicious actor with local access to a virtual machine may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://www.vmware.com/security/advisories/VMSA-2020-0015.html; https://www.zerodayinitiative.com/advisories/ZDI-20-783/; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-3967
Published: 2020-06-25
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a heap-overflow vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local access to a virtual machine may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.vmware.com/security/advisories/VMSA-2020-0015.html; https://www.zerodayinitiative.com/advisories/ZDI-20-784/; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-3968
Published: 2020-06-25
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds write vulnerability in the USB 3.0 controller (xHCI). A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to crash the virtual machine's vmx process leading to a denial of service condition or execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://www.vmware.com/security/advisories/VMSA-2020-0015.html; https://www.zerodayinitiative.com/advisories/ZDI-20-781/; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-3970
Published: 2020-06-25
Description: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process leading to a partial denial of service condition.
CVSS Score: 3.8 (LOW)
CWE: CWE-125
References: https://www.vmware.com/security/advisories/VMSA-2020-0015.html; https://www.zerodayinitiative.com/advisories/ZDI-20-782/; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2020-3971
Published: 2020-06-25
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.vmware.com/security/advisories/VMSA-2020-0015.html; https://www.vmware.com/security/advisories/VMSA-2020-0015.html
CVE: CVE-2018-21268
Published: 2020-06-25
Description: The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-74
References: https://github.com/jaw187/node-traceroute/commit/b99ee024a01a40d3d20a92ad3769cc78a3f6386f; https://github.com/jaw187/node-traceroute/tags; https://medium.com/%40shay_62828/shell-command-injection-through-traceroute-npm-package-a4cf7b6553e3
CVE: CVE-2020-7354
Published: 2020-06-25
Description: Cross-site Scripting (XSS) vulnerability in the 'host' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a scan target to store an XSS sequence in the Metasploit Pro console, which will trigger when the operator views the record of that scanned host in the Metasploit Pro interface. This issue affects Rapid7 Metasploit Pro version 4.17.1-20200427 and prior versions, and is fixed in Metasploit Pro version 4.17.1-20200514. See also CVE-2020-7355, which describes a similar issue, but involving the generated 'notes' field of a discovered scan asset.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://avalz.it/research/metasploit-pro-xss-to-rce/; https://help.rapid7.com/metasploit/release-notes/archive/2020/05/#20200514; https://avalz.it/research/metasploit-pro-xss-to-rce/
CVE: CVE-2020-7355
Published: 2020-06-25
Description: Cross-site Scripting (XSS) vulnerability in the 'notes' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a scan target store an XSS sequence in the Metasploit Pro console, which will trigger when the operator views the record of that scanned host in the Metasploit Pro interface. This issue affects Rapid7 Metasploit Pro version 4.17.1-20200427 and prior versions, and is fixed in Metasploit Pro version 4.17.1-20200514. See also CVE-2020-7354, which describes a similar issue, but involving the generated 'host' field of a discovered scan asset.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://avalz.it/research/metasploit-pro-xss-to-rce/; https://help.rapid7.com/metasploit/release-notes/archive/2020/05/#20200514; https://avalz.it/research/metasploit-pro-xss-to-rce/
CVE: CVE-2020-10177
Published: 2020-06-25
Description: Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/python-pillow/Pillow/commits/master/src/libImaging; https://github.com/python-pillow/Pillow/pull/4503; https://github.com/python-pillow/Pillow/pull/4538
CVE: CVE-2020-10378
Published: 2020-06-25
Description: In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/python-pillow/Pillow/commit/6a83e4324738bb0452fbe8074a995b1c73f08de7#diff-9478f2787e3ae9668a15123b165c23ac; https://github.com/python-pillow/Pillow/commits/master/src/libImaging; https://github.com/python-pillow/Pillow/pull/4538
CVE: CVE-2020-10379
Published: 2020-06-25
Description: In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/python-pillow/Pillow/commit/46f4a349b88915787fea3fb91348bb1665831bbb#diff-9478f2787e3ae9668a15123b165c23ac; https://github.com/python-pillow/Pillow/commits/master/src/libImaging; https://github.com/python-pillow/Pillow/pull/4538
CVE: CVE-2020-10994
Published: 2020-06-25
Description: In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/python-pillow/Pillow/commits/master/src/libImaging/; https://github.com/python-pillow/Pillow/pull/4505; https://github.com/python-pillow/Pillow/pull/4538
CVE: CVE-2020-11538
Published: 2020-06-25
Description: In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/python-pillow/Pillow/pull/4504; https://github.com/python-pillow/Pillow/pull/4538; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEBCPE4F2VHTIT6EZA2YZQZLPVDEBJGD/
CVE: CVE-2019-16213
Published: 2020-06-25
Description: Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/; https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/
CVE: CVE-2019-19505
Published: 2020-06-25
Description: Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wireless" section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/; https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/
CVE: CVE-2019-19506
Published: 2020-06-25
Description: Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/; https://securityintelligence.com/posts/vulnerable-powerline-extenders-underline-lax-iot-security/
CVE: CVE-2020-15302
Published: 2020-06-25
Description: In Argent RecoveryManager before 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192, the executeRecovery function does not require any signatures in the zero-guardian case, which allows attackers to cause a denial of service (locking) or a takeover.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://blog.openzeppelin.com/argent-vulnerability-report/; https://blog.openzeppelin.com/argent-vulnerability-report/
CVE: CVE-2020-4072
Published: 2020-06-25
Description: In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem affects only application generated with jwt or session authentication. Applications using oauth are not vulnerable. This issue has been fixed in version 1.7.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://github.com/jhipster/jhipster-kotlin/commit/426ccab85e7e0da[PII_REDACTED]37b99b6a2a99449; https://github.com/jhipster/jhipster-kotlin/security/advisories/GHSA-pfxf-wh96-fvjc; https://owasp.org/www-community/attacks/Log_Injection
CVE: CVE-2020-9437
Published: 2020-06-25
Description: SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://docs.secureauth.com/display/SID/SecureAuth+IdP+Latest+Releases; https://know.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/secureauth-version-9.3
CVE: CVE-2020-9666
Published: 2020-06-25
Description: Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/campaign/apsb20-34.html; https://helpx.adobe.com/security/products/campaign/apsb20-34.html
CVE: CVE-2020-5966
Published: 2020-06-25
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, in which a NULL pointer is dereferenced, leading to denial of service or potential escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5031; https://nvidia.custhelp.com/app/answers/detail/a_id/5031
CVE: CVE-2020-5967
Published: 2020-06-25
Description: NVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in which a race condition may lead to a denial of service.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5031; https://usn.ubuntu.com/4404-1/; https://usn.ubuntu.com/4404-2/
CVE: CVE-2020-9575
Published: 2020-06-25
Description: Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-37.html; https://helpx.adobe.com/security/products/illustrator/apsb20-37.html
CVE: CVE-2020-9592
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass.
CVSS Score: 7.8 (HIGH)
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9593
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9594
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9595
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9596
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass.
CVSS Score: 7.8 (HIGH)
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9597
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9598
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9599
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9600
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
CVE: CVE-2020-9601
Published: 2020-06-25
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb20-24.html; https://helpx.adobe.com/security/products/acrobat/apsb20-24.html