rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-9498 
Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels. If a userconnects to a malicious or compromised RDP server, a series ofspecially-crafted PDUs could result in memory corruption, possiblyallowing arbitrary code to be executed with the privileges of therunning guacd process.
Problem types: description: Expired Pointer Dereference
Affected products: vendor: n/a
product: Apache Guacamole
Published: 2020-07-02T12:32:44.000Z
CVE-2020-9499 
Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series
Published: 2020-04-09T13:19:23.000Z
CVE-2020-9500 
Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series
Published: 2020-04-09T13:21:01.000Z
CVE-2020-9501 
Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in additional consumption of platform server resources. Versions with Build time before April 2020 are affected.
Problem types: description: Information leakage
Affected products: vendor: n/a
product: Web P2P control,P2P plartform server,client tools
Published: 2020-05-13T15:17:20.000Z
CVE-2020-9502 
Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device.
Problem types: description: Session hijacking
Affected products: vendor: n/a
product: IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HFW1431S
Published: 2020-05-13T15:21:12.000Z
CVE-2020-9514 
An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers.php allows a logged-in user (with the Subscriber role) to permanently delete arbitrary posts and pages, create new posts with arbitrary subjects, and modify the subjects of existing posts and pages (via create_dynamic_page and delete_dynamic_page).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-04-07T16:42:51.000Z
CVE-2020-9517 
There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of malicious users to perform UI redress attacks.
Problem types: description: Improper restriction of rendered UI layers or frames
Affected products: vendor: Micro Focus International
product: Service Manager
Published: 2020-03-09T15:54:33.000Z
CVE-2020-9518 
Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to configuration data.
Problem types: description: Login filter can access configuration files
Affected products: vendor: Micro Focus International
product: Service Manager (Web Tier).
Published: 2020-03-16T13:01:28.000Z
CVE-2020-9519 
HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow exposure of configuration data.
Problem types: description: HTTP methods reveled in Web services.
Affected products: vendor: Micro Focus International
product: Service Manager (Server).
Published: 2020-03-16T13:00:11.000Z
CVE-2020-9520 
A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vibe such that when the content is viewed by another user of the system, attacker controlled JavaScript will execute in the security context of the target user’s browser.
Problem types: description: Stored XSS
Affected products: vendor: Micro Focus International
product: Micro Focus Vibe.
Published: 2020-03-25T20:59:48.000Z
CVE-2020-9521 
An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow for the improper neutralization of special elements in SQL commands and may lead to the product being vulnerable to SQL injection.
Problem types: description: SQL injection
Affected products: vendor: Micro Focus International
product: Micro Focus - Service Manager Automation (SMA)
Published: 2020-03-26T14:21:41.000Z
CVE-2020-9522 
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.
Problem types: description: Cross Site Scripting
Affected products: vendor: n/a
product: ArcSight Enterprise Security Manager (ESM).
Published: 2020-06-16T13:07:40.000Z
CVE-2020-9523 
Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security.
Problem types: description: Insufficiently protected credentials
Affected products: vendor: n/a
product: Enterprise developer and server.
Published: 2020-04-17T14:18:04.000Z
CVE-2020-9524 
Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker (stored XSS) or followed a malicious link (reflected XSS).
Problem types: description: Cross Site scripting.
Affected products: vendor: n/a
product: Enterprise Server and Enterprise developer.
Published: 2020-05-18T13:19:53.000Z
CVE-2020-9525 
CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an authentication flaw that allows remote attackers to perform a man-in-the-middle attack, as demonstrated by eavesdropping on user video/audio streams, capturing credentials, and compromising devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T15:21:43.000Z
CVE-2020-9526 
CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an information exposure flaw that exposes user session data to supernodes in the network, as demonstrated by passively eavesdropping on user video/audio streams, capturing credentials, and compromising devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T15:22:40.000Z
CVE-2020-9527 
Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20, after 2018-08-09 through 2020), as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via the peer-to-peer (P2P) service. This affects products marketed under the following brand names: Accfly, Alptop, Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes, Escam, FLOUREON, GENBOLT, Hongjingtian (HJT), ICAMI, Iegeek, Jecurity, Jennov, KKMoon, LEFTEK, Loosafe, Luowice, Nesuniq, Nettoly, ProElite, QZT, Royallite, SDETER, SV3C, SY2L, Tenvis, ThinkValue, TOMLOV, TPTEK, WGCC, and ZILINK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T15:24:50.000Z
CVE-2020-9528 
Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions of Internet of Things devices, suffers from cryptographic issues that allow remote attackers to access user session data, as demonstrated by eavesdropping on user video/audio streams, capturing credentials, and compromising devices. This affects products marketed under the following brand names: Accfly, Alptop, Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes, Escam, FLOUREON, GENBOLT, Hongjingtian (HJT), ICAMI, Iegeek, Jecurity, Jennov, KKMoon, LEFTEK, Loosafe, Luowice, Nesuniq, Nettoly, ProElite, QZT, Royallite, SDETER, SV3C, SY2L, Tenvis, ThinkValue, TOMLOV, TPTEK, WGCC, and ZILINK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T15:25:38.000Z
CVE-2020-9529 
Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This affects products marketed under the following brand names: Accfly, Alptop, Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes, Escam, FLOUREON, GENBOLT, Hongjingtian (HJT), ICAMI, Iegeek, Jecurity, Jennov, KKMoon, LEFTEK, Loosafe, Luowice, Nesuniq, Nettoly, ProElite, QZT, Royallite, SDETER, SV3C, SY2L, Tenvis, ThinkValue, TOMLOV, TPTEK, WGCC, and ZILINK.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T15:26:43.000Z
CVE-2020-9530 
An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific network environment. By jumping to the WebView component of Messaging(com.android.MMS) and loading malicious web pages, information leakage can occur. This is fixed on version: 2001122; 11.0.1.54.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-06T16:49:36.000Z
CVE-2020-9531 
An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.mipicks), the parameters passed in are read and executed. After reading the resource files, relevant components open the link of the incoming URL. Although the URL is safe and can pass security detection, the data carried in the parameters are loaded and executed. An attacker can use NFC tools to get close enough to a user's unlocked phone to cause apps to be installed and information to be leaked. This is fixed on version: 2001122.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-06T16:49:42.000Z
CVE-2020-9534 
fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup webpage parameter when f_radius_ip1 is malformed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-01T23:03:20.000Z
CVE-2020-9535 
fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup_Wizard webpage parameter when f_radius_ip1 is malformed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-01T23:03:10.000Z
CVE-2020-9540 
Sophos HitmanPro.Alert before build 861 allows local elevation of privilege.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-01T23:50:25.000Z
CVE-2020-9543 
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T16:40:20.000Z
CVE-2020-9544 
An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-update POST request. Any attacker that can access the administrative interface can install firmware of their choice.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-05T14:57:01.000Z
CVE-2020-9545 
Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T01:00:00.000Z
CVE-2020-9546 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T03:59:18.000Z
CVE-2020-9547 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T03:59:08.000Z
CVE-2020-9548 
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T03:58:55.000Z
CVE-2020-9549 
In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T04:32:20.000Z
CVE-2020-9550 
Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-04T18:19:05.000Z
CVE-2020-9551 
Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Out-of-bounds write
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-03-25T19:04:24.000Z
CVE-2020-9552 
Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Heap-based buffer overflow
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-03-25T19:04:33.000Z
CVE-2020-9553 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:09:49.000Z
CVE-2020-9554 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write 
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:09:22.000Z
CVE-2020-9555 
Adobe Bridge versions 10.0.1 and earlier version have a stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Stack-based Buffer Overflow
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:10:08.000Z
CVE-2020-9556 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write 
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:10:32.000Z
CVE-2020-9557 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:10:41.000Z
CVE-2020-9558 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:08:35.000Z
CVE-2020-9559 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write 
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:09:41.000Z
CVE-2020-9560 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write 
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:10:23.000Z
CVE-2020-9561 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write 
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:10:15.000Z
CVE-2020-9562 
Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:09:59.000Z
CVE-2020-9563 
Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:10:59.000Z
CVE-2020-9564 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write 
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:10:51.000Z
CVE-2020-9565 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write 
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:09:12.000Z
CVE-2020-9566 
Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:09:04.000Z
CVE-2020-9567 
Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:08:43.000Z
CVE-2020-9568 
Adobe Bridge versions 10.0.1 and earlier version have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Memory Corruption
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:08:50.000Z
CVE-2020-9569 
Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write 
Affected products: vendor: Adobe
product: Adobe Bridge
Published: 2020-06-26T20:08:57.000Z
CVE-2020-9570 
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Memory Corruption
Affected products: vendor: Adobe
product: Adobe Illustrator
Published: 2020-06-26T20:15:47.000Z
CVE-2020-9571 
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: Adobe
product: Adobe Illustrator
Published: 2020-06-26T20:15:34.000Z
CVE-2020-9572 
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: Adobe
product: Adobe Illustrator
Published: 2020-06-26T20:15:53.000Z
CVE-2020-9573 
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Memory Corruption
Affected products: vendor: Adobe
product: Adobe Illustrator
Published: 2020-06-26T20:15:41.000Z
CVE-2020-9574 
Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Memory Corruption
Affected products: vendor: Adobe
product: Adobe Illustrator
Published: 2020-06-26T20:16:05.000Z
CVE-2020-9575 
Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Memory Corruption
Affected products: vendor: Adobe
product: Adobe Illustrator
Published: 2020-06-25T21:03:34.000Z
CVE-2020-9576 
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Command injection
Affected products: vendor: Adobe
product: Magento
Published: 2020-06-26T20:21:17.000Z
CVE-2020-9577 
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure .
Problem types: description: Stored cross-site scripting
Affected products: vendor: Adobe
product: Magento
Published: 2020-06-26T20:21:24.000Z
CVE-2020-9578 
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Command injection
Affected products: vendor: Adobe
product: Magento
Published: 2020-06-26T20:20:45.000Z
CVE-2020-9579 
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Security mitigation bypass
Affected products: vendor: Adobe
product: Magento
Published: 2020-06-26T20:18:51.000Z