rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-7876 
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to manipulate layouts can insert a malicious payload into the layout.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:18:53.000Z
CVE-2019-7877 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to manage orders can inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:19:17.000Z
CVE-2019-7880 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to marketing email templates to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:19:44.000Z
CVE-2019-7881 
A cross-site scripting mitigation bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user to escalate privileges (admin vs. admin XSS attack).
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:20:04.000Z
CVE-2019-7882 
A stored cross-site scripting vulnerability exists in the WYSIWYG editor of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to the editor can inject malicious SWF files.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:20:29.000Z
CVE-2019-7885 
Insufficient input validation in the config builder of the Elastic search module could lead to remote code execution in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This vulnerability could be abused by an authenticated user with the ability to configure the catalog search.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:20:53.000Z
CVE-2019-7886 
A cryptograhic flaw exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A weak cryptograhic mechanism is used to generate the intialization vector in multiple security relevant contexts.
Problem types: description: Cryptographic Flaw
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:21:15.000Z
CVE-2019-7887 
A reflected cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 when the feature that adds a secret key to the Admin URL is disabled.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:21:40.000Z
CVE-2019-7888 
An information disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to create email templates could leak sensitive data via a malicious email template.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:22:00.000Z
CVE-2019-7889 
An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications.
Problem types: description: Injection
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:22:30.000Z
CVE-2019-7890 
An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details.
Problem types: description: Insecure Direct Object Reference
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:22:50.000Z
CVE-2019-7892 
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to access shipment settings can execute arbitrary code via server-side request forgery.
Problem types: description: Server-side Request Forgery
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:23:08.000Z
CVE-2019-7895 
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to layouts can execute arbitrary code through a crafted XML layout update.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:23:27.000Z
CVE-2019-7896 
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to layouts can execute arbitrary code through a combination of product import, crafted csv file and XML layout update.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:23:46.000Z
CVE-2019-7897 
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to customer configurations to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:24:04.000Z
CVE-2019-7898 
Samples of disabled downloadable products are accessible in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to inadequate validation of user input.
Problem types: description: Information Leakage
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:24:28.000Z
CVE-2019-7899 
Names of disabled downloadable products could be disclosed due to inadequate validation of user input in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
Problem types: description: Information Leakage
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:24:47.000Z
CVE-2019-7903 
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to email templates can execute arbitrary code by previewing a malicious template.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:25:07.000Z
CVE-2019-7904 
Insufficient enforcement of user access controls in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could enable a low-privileged user to make unauthorized environment configuration changes.
Problem types: description: Access Control Bypass
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:25:26.000Z
CVE-2019-7908 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify product information.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:25:53.000Z
CVE-2019-7909 
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to email templates.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:26:16.000Z
CVE-2019-7911 
A server-side request forgery (SSRF) vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to the admin panel to manipulate system configuration and execute arbitrary code.
Problem types: description: Server-side Request Forgery
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:26:37.000Z
CVE-2019-7912 
A file upload filter bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with admin privileges to edit configuration keys to remove file extension filters, potentially resulting in the malicious upload and execution of malicious files on the server.
Problem types: description: File Upload Restriction Bypass
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:27:05.000Z
CVE-2019-7913 
A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with admin privileges to manipulate shipment methods to execute arbitrary code.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:27:25.000Z
CVE-2019-7915 
A denial-of-service vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Under certain conditions, an unauthenticated attacker could force the Magento store's full page cache to serve a 404 page to customers.
Problem types: description: Denial-of-Service
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:27:59.000Z
CVE-2019-7921 
A stored cross-site scripting vulnerability exists in the product catalog form of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to the product catalog to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:28:17.000Z
CVE-2019-7923 
A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code.
Problem types: description: Server-side Request Forgery
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:28:36.000Z
CVE-2019-7925 
An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an administrator with limited privileges to delete the downloadable products folder.
Problem types: description: Insecure Direct Object Reference
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:29:03.000Z
CVE-2019-7926 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify node attributes to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:29:28.000Z
CVE-2019-7927 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to edit product content pages to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:29:45.000Z
CVE-2019-7928 
A denial-of-service (DoS) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. By abusing insufficient brute-forcing defenses in the token exchange protocol, an unauthenticated attacker could disrupt transactions between the Magento merchant and PayPal.
Problem types: description: Denial-of-Service
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:30:04.000Z
CVE-2019-7929 
An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges may be able to view metadata of a trusted device used by another administrator via a crafted http request.
Problem types: description: Information Leakage
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:30:27.000Z
CVE-2019-7930 
A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to the import feature can make modifications to a configuration file, resulting in potentially unauthorized removal of file upload restrictions. This can result in arbitrary code execution when a malicious file is then uploaded and executed on the system.
Problem types: description: File Upload Restriction Bypass
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:30:46.000Z
CVE-2019-7931 
Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Insecure Library Loading (DLL hijacking)
Affected products: vendor: Adobe
product: Adobe Premiere Pro CC
Published: 2019-08-14T14:52:25.000Z
CVE-2019-7932 
A remote code execution vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to create sitemaps can execute arbitrary PHP code by creating a malicious sitemap file.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:31:05.000Z
CVE-2019-7934 
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to edit newsletter templates to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:31:26.000Z
CVE-2019-7935 
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify content page titles to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:31:53.000Z
CVE-2019-7936 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify content block titles to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:32:14.000Z
CVE-2019-7937 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to store product attributes to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:32:35.000Z
CVE-2019-7938 
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify catalog price rules to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:33:03.000Z
CVE-2019-7939 
A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by sending a victim a crafted URL that results in malicious javascript execution in the victim's browser.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:33:20.000Z
CVE-2019-7940 
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify store currency options to inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:33:42.000Z
CVE-2019-7941 
Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.
Problem types: description: Information Exposure Through an Error Message
Affected products: vendor: n/a
product: Adobe Campaign
Published: 2019-07-18T21:45:27.000Z
CVE-2019-7942 
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to create or edit a product can execute arbitrary code via malicious XML layout updates.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:34:07.000Z
CVE-2019-7944 
A stored cross-site scripting vulnerability exists in the product comments field of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to the Return Product comments field can inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:34:28.000Z
CVE-2019-7945 
A stored cross-cite scripting vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to modify currency symbols can inject malicious javascript.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:34:46.000Z
CVE-2019-7947 
A cross-site request forgery vulnerability exists in the GiftCardAccount removal feature for Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:35:03.000Z
CVE-2019-7950 
An access control bypass vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An unauthenticated user can bypass access controls via REST API calls to assign themselves to an arbitrary company, thereby gaining read access to potentially confidental information.
Problem types: description: Access Control Bypass
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:35:49.000Z
CVE-2019-7951 
An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web service endpoint does not properly enforce parameters related to access control. This could be abused to leak customer information via crafted SOAP requests.
Problem types: description: Inadequate Input Validation
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:36:12.000Z
CVE-2019-7953 
Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Adobe Experience Manager
Published: 2019-07-18T21:49:50.000Z
CVE-2019-7954 
Adobe Experience Manager version 6.4 and ealier have a Stored Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.
Problem types: description: Stored?Cross-site Scripting
Affected products: vendor: n/a
product: Adobe Experience Manager
Published: 2019-07-18T21:49:15.000Z
CVE-2019-7955 
Adobe Experience Manager version 6.4 and ealier have a Reflected Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.
Problem types: description: Reflected Cross-site Scripting
Affected products: vendor: n/a
product: Adobe Experience Manager
Published: 2019-07-18T21:48:57.000Z
CVE-2019-7956 
Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user.
Problem types: description: Insecure Library Loading (DLL hijacking)?
Affected products: vendor: n/a
product: Adobe Dreamweaver
Published: 2019-07-18T21:47:32.000Z
CVE-2019-7957 
Creative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass vulnerability. Successful exploitation could lead to denial of service.
Problem types: description: Security Bypass
Affected products: vendor: Adobe
product: Creative Cloud Desktop Application
Published: 2019-08-16T16:37:37.000Z
CVE-2019-7958 
Creative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability. Successful exploitation could lead to privilege escalation.
Problem types: description: Insecure Inherited Permissions
Affected products: vendor: Adobe
product: Creative Cloud Desktop Application
Published: 2019-08-16T16:38:49.000Z