rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-8138 
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can execute arbitrary JavaScript code by providing arbitrary API endpoint that will not be chcecked by sale pickup event.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:22:44.000Z
CVE-2019-8139 
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary Javascript code into the dynamic block when invoking page builder on a product.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:23:58.000Z
CVE-2019-8140 
An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to transform uploaded JPEG file into a PHP file.
Problem types: description: Unrestricted file upload
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:25:01.000Z
CVE-2019-8141 
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with administrative privileges (system level import) can execute arbitrary code through a Phar deserialization vulnerability in the import functionality.
Problem types: description: Remote Code Execution
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:26:49.000Z
CVE-2019-8142 
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via title of an order when configuring sales payment methods for a store.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:27:33.000Z
CVE-2019-8143 
A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to email templates can send malicious SQL queries and obtain access to sensitive information stored in the database.
Problem types: description: SQL injection
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:28:45.000Z
CVE-2019-8144 
A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload through PageBuilder template methods.
Problem types: description: Remote Code Execution
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:30:06.000Z
CVE-2019-8145 
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the attribute set name when listing the products.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-06T00:04:43.000Z
CVE-2019-8146 
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code when adding a new customer attribute for stores.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:31:42.000Z
CVE-2019-8147 
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via customer attribute label.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:32:55.000Z
CVE-2019-8148 
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when creating a content page via page builder.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:34:18.000Z
CVE-2019-8149 
Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can append arbitrary session id that will not be invalidated by subsequent authentication.
Problem types: description: Broken Authentication
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:35:11.000Z
CVE-2019-8150 
A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to manipulate layouts and images can insert a malicious payload into the page layout.
Problem types: description: Remote Code Execution
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:36:10.000Z
CVE-2019-8151 
A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier gateway.
Problem types: description: Remote Code Execution
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:37:12.000Z
CVE-2019-8152 
A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to the wysiwyg editor can abuse the blockDirective() function and inject malicious javascript in the cache of the admin dashboard.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 1 & 2
Published: 2019-11-05T23:47:41.000Z
CVE-2019-8153 
A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Successful exploitation of this vulnerability would result in an attacker being able to bypass the `escapeURL()` function and execute a malicious XSS payload.
Problem types: description: Security bypass
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:49:40.000Z
CVE-2019-8154 
A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to modify product catalogs can trigger PHP file inclusion through a crafted XML file that specifies product design update.
Problem types: description: Remote Code Execution
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-05T23:50:16.000Z
CVE-2019-8155 
Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to network traffic to perform unauthorized actions.
Problem types: description: Information leakage
Affected products: vendor: Adobe Systems Incorporated
product: Magento 1
Published: 2019-11-05T23:52:16.000Z
CVE-2019-8156 
A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to modify store configurations can manipulate the connector api endpoint to enable remote code execution.
Problem types: description: Server-side Request Forgery
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-06T00:01:34.000Z
CVE-2019-8157 
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate downloadable link and cause an invocation of error handling that acceses user input without sanitization.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-06T00:03:03.000Z
CVE-2019-8158 
An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data allows an attacker to limited access to underlying XML data.
Problem types: description: XPath Injection vulnerability
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-06T00:03:49.000Z
CVE-2019-8159 
A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with system data manipulation privileges can execute aribitrary code through arbitrary file deletion and OS command injection.
Problem types: description: Remote Code Execution
Affected products: vendor: Adobe Systems Incorporated
product: Magento 2
Published: 2019-11-06T00:01:03.000Z
CVE-2019-8160 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Cross-site Scripting
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:11:09.000Z
CVE-2019-8161 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Type Confusion
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:11:32.000Z
CVE-2019-8162 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a race condition vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Race Condition
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:11:53.000Z
CVE-2019-8163 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:13:08.000Z
CVE-2019-8164 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:13:14.000Z
CVE-2019-8165 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:13:33.000Z
CVE-2019-8166 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a buffer overrun vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Buffer Overrun
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:13:41.000Z
CVE-2019-8167 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Type Confusion
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:13:57.000Z
CVE-2019-8168 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:14:03.000Z
CVE-2019-8169 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Type Confusion
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:15:07.000Z
CVE-2019-8170 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:15:26.000Z
CVE-2019-8171 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:15:34.000Z
CVE-2019-8172 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:15:40.000Z
CVE-2019-8173 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:15:48.000Z
CVE-2019-8174 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Untrusted Pointer Dereference
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:16:00.000Z
CVE-2019-8175 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:16:10.000Z
CVE-2019-8176 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:17:40.000Z
CVE-2019-8177 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:17:48.000Z
CVE-2019-8178 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:17:56.000Z
CVE-2019-8179 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:18:04.000Z
CVE-2019-8180 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:18:10.000Z
CVE-2019-8181 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:18:17.000Z
CVE-2019-8182 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:18:23.000Z
CVE-2019-8183 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:18:33.000Z
CVE-2019-8184 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:18:57.000Z
CVE-2019-8185 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:19:04.000Z
CVE-2019-8186 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:19:12.000Z
CVE-2019-8187 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:19:18.000Z
CVE-2019-8188 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:19:25.000Z
CVE-2019-8189 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:19:31.000Z
CVE-2019-8190 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:19:39.000Z
CVE-2019-8191 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:19:48.000Z
CVE-2019-8192 
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-10-17T20:19:54.000Z