deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-17117
Published: 2019-10-17
Description: A SQL injection vulnerability in processPref.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows an authenticated user to execute arbitrary SQL commands via the processPref.jsp key parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html; http://seclists.org/fulldisclosure/2019/Oct/35; https://www.securitymetrics.com/blog/wikid-2fa-enterprise-server-sql-injection
CVE: CVE-2019-17118
Published: 2019-10-17
Description: A CSRF issue in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows a remote attacker to trick an authenticated user into performing unintended actions such as (1) create or delete admin users; (2) create or delete groups; or (3) create, delete, enable, or disable normal users or devices.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html; http://seclists.org/fulldisclosure/2019/Oct/35; https://www.securitymetrics.com/blog/
CVE: CVE-2019-17631
Published: 2019-10-17
Description: From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-285, CWE-269
References: https://access.redhat.com/errata/RHSA-2019:4113; https://access.redhat.com/errata/RHSA-2019:4115; https://access.redhat.com/errata/RHSA-2020:0006
CVE: CVE-2019-10752
Published: 2019-10-17
Description: Sequelize, all versions prior to version 4.44.3 and 5.15.1, is vulnerable to SQL Injection due to sequelize.json() helper function not escaping values properly when formatting sub paths for JSON queries for MySQL, MariaDB and SQLite.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/sequelize/sequelize/commit/9bd0bc1%2C; https://github.com/sequelize/sequelize/commit/9bd0bc111b6f502223edf7e902680f7cc2ed541e; https://snyk.io/vuln/SNYK-JS-SEQUELIZE-459751%2C
CVE: CVE-2019-12611
Published: 2019-10-17
Description: An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation in result in the device allocating memory without freeing it later. This behavior can cause the miniupnpd component to crash or to trigger a device reboot.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-770
References: https://www.bitdefender.com/support/security-advisories/bitdefender-box-denial-service-va-3184/; https://www.bitdefender.com/support/security-advisories/bitdefender-box-denial-service-va-3184/
CVE: CVE-2019-13657
Published: 2019-10-17
Description: CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://packetstormsecurity.com/files/154904/CA-Performance-Management-Arbitary-Command-Execution.html; http://packetstormsecurity.com/files/154904/CA-Performance-Management-Arbitrary-Command-Execution.html; http://seclists.org/fulldisclosure/2019/Oct/37
CVE: CVE-2019-15626
Published: 2019-10-17
Description: The Deep Security Manager application (Versions 10.0, 11.0 and 12.0), when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://success.trendmicro.com/solution/000149495; https://success.trendmicro.com/solution/000149495
CVE: CVE-2019-15627
Published: 2019-10-17
Description: Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: http://packetstormsecurity.com/files/155579/Trend-Micro-Deep-Security-Agent-11-Arbitrary-File-Overwrite.html; https://success.trendmicro.com/solution/000149495; http://packetstormsecurity.com/files/155579/Trend-Micro-Deep-Security-Agent-11-Arbitrary-File-Overwrite.html
CVE: CVE-2019-17119
Published: 2019-10-17
Description: Multiple SQL injection vulnerabilities in Logs.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allow authenticated users to execute arbitrary SQL commands via the source or subString parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html; http://seclists.org/fulldisclosure/2019/Oct/35; https://www.securitymetrics.com/blog/wikid-2fa-enterprise-server-sql-injection
CVE: CVE-2019-17120
Published: 2019-10-17
Description: A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/adm_usrs.jsp. The usr parameter is vulnerable: the reflected cross-site scripting occurs immediately after the user is created. The malicious script is stored and will be executed whenever /WiKIDAdmin/adm_usrs.jsp is visited.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154912/WiKID-Systems-2FA-Enterprise-Server-4.2.0-b2032-SQL-Injection-XSS-CSRF.html; http://seclists.org/fulldisclosure/2019/Oct/35; https://www.securitymetrics.com/blog/wikid-2fa-enterprise-server-cross-site-scripting
CVE: CVE-2019-8071
Published: 2019-10-17
Description: Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://helpx.adobe.com/security/products/adm/apsb19-51.html; https://helpx.adobe.com/security/products/adm/apsb19-51.html
CVE: CVE-2019-13409
Published: 2019-10-17
Description: A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 (2019/08/19). An attacker can use a union based injection query string though a search meeting room feature to get databases schema and username/password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://tvn.twcert.org.tw/taiwanvn/TVN-201907001; https://www.twcert.org.tw/en/cp-128-3019-f0dd8-2.html; https://tvn.twcert.org.tw/taiwanvn/TVN-201907001
CVE: CVE-2019-13410
Published: 2019-10-17
Description: TOPMeeting before version 8.8 (2019/08/19) shows attendees account and password in front end page that allows an attacker to obtain sensitive information by browsing the source code of the page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: https://tvn.twcert.org.tw/taiwanvn/TVN-201907002; https://www.twcert.org.tw/en/cp-128-3020-27eb5-2.html; https://tvn.twcert.org.tw/taiwanvn/TVN-201907002
CVE: CVE-2019-13412
Published: 2019-10-17
Description: A service which is hosted on port 3097 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).
CVSS Score: 9.3 (CRITICAL)
References: https://tvn.twcert.org.tw/taiwanvn/TVN-201908006; https://www.twcert.org.tw/en/cp-128-3014-904b1-2.html; https://tvn.twcert.org.tw/taiwanvn/TVN-201908006
CVE: CVE-2019-15064
Published: 2019-10-17
Description: HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://tvn.twcert.org.tw/taiwanvn/TVN-201908007; https://www.twcert.org.tw/en/cp-128-3015-170fe-2.html; https://tvn.twcert.org.tw/taiwanvn/TVN-201908007
CVE: CVE-2019-15065
Published: 2019-10-17
Description: A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L).
CVSS Score: 9.3 (CRITICAL)
References: https://tvn.twcert.org.tw/taiwanvn/TVN-201908011; https://www.twcert.org.tw/en/cp-128-3016-b0e90-2.html; https://tvn.twcert.org.tw/taiwanvn/TVN-201908011
CVE: CVE-2019-15066
Published: 2019-10-17
Description: An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 6998. CVSS 3.0 Base score 10.0. CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 10.0 (CRITICAL)
References: https://tvn.twcert.org.tw/taiwanvn/TVN-201908012; https://www.twcert.org.tw/en/cp-128-3017-fd6bc-2.html; https://tvn.twcert.org.tw/taiwanvn/TVN-201908012
CVE: CVE-2019-18192
Published: 2019-10-17
Description: GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.openwall.com/lists/oss-security/2019/10/17/3; https://issues.guix.gnu.org/issue/37744; http://www.openwall.com/lists/oss-security/2019/10/17/3
CVE: CVE-2019-6475
Published: 2019-10-17
Description: Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional recursion, and when mirror zone data cannot be validated, BIND falls back to using traditional recursion instead of the mirror zone. However, an error in the validity checks for the incoming zone data can allow an on-path attacker to replace zone data that was validated with a configured trust anchor with forged data of the attacker's choosing. The mirror zone feature is most often used to serve a local copy of the root zone. If an attacker was able to insert themselves into the network path between a recursive server using a mirror zone and a root name server, this vulnerability could then be used to cause the recursive server to accept a copy of falsified root zone data. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-345
References: https://kb.isc.org/docs/cve-2019-6475; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.f5.com/csp/article/K42238532?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-6476
Published: 2019-10-17
Description: A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-617
References: https://kb.isc.org/docs/cve-2019-6476; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.f5.com/csp/article/K42238532?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-8064
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8160
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8161
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8162
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have a race condition vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8163
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8164
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8165
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8166
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have a buffer overrun vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8167
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8168
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8169
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8170
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8171
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8172
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8173
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8174
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8175
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8176
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8177
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8178
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8179
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8180
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8181
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8182
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
CVE: CVE-2019-8183
Published: 2019-10-17
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]3 and earlier, and 2[PII_REDACTED]3 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-49.html; https://helpx.adobe.com/security/products/acrobat/apsb19-49.html