rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-7819 Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability  
Adobe Acrobat Reader versions 2019.010.20098 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Problem types: cwe_id: CWE-125
description: Out-of-bounds Read (CWE-125)
Affected products: vendor: Adobe
product: Acrobat Reader
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
availabilityRequirement: NOT_DEFINED
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
confidentialityRequirement: NOT_DEFINED
environmentalScore: 5.5
environmentalSeverity: MEDIUM
exploitCodeMaturity: NOT_DEFINED
integrityImpact: NONE
integrityRequirement: NOT_DEFINED
modifiedAttackComplexity: LOW
modifiedAttackVector: LOCAL
modifiedAvailabilityImpact: NONE
modifiedConfidentialityImpact: HIGH
modifiedIntegrityImpact: NONE
modifiedPrivilegesRequired: NONE
modifiedScope: NOT_DEFINED
modifiedUserInteraction: REQUIRED
privilegesRequired: NONE
remediationLevel: NOT_DEFINED
reportConfidence: NOT_DEFINED
scope: UNCHANGED
temporalScore: 5.5
temporalSeverity: MEDIUM
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Published: 2023-09-11T13:50:54.091Z
CVE-2019-7820 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Type Confusion
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T15:42:52.000Z
CVE-2019-7821 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:27:05.000Z
CVE-2019-7822 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:28:37.000Z
CVE-2019-7823 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier version, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:31:18.000Z
CVE-2019-7824 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Buffer Error
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:32:45.000Z
CVE-2019-7825 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:36:07.000Z
CVE-2019-7826 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:34:25.000Z
CVE-2019-7827 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:37:36.000Z
CVE-2019-7828 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:38:58.000Z
CVE-2019-7829 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Out-of-Bounds Write
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:39:59.000Z
CVE-2019-7830 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:41:40.000Z
CVE-2019-7831 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:42:47.000Z
CVE-2019-7832 
Adobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2017.011.30142 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
Problem types: description: Heap Overflow
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:58:17.000Z
CVE-2019-7833 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T17:59:29.000Z
CVE-2019-7834 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T18:01:01.000Z
CVE-2019-7835 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T18:01:57.000Z
CVE-2019-7836 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T18:04:12.000Z
CVE-2019-7837 
Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Flash Player
Published: 2019-05-22T18:08:08.000Z
CVE-2019-7838 
ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: File extension blacklist bypass
Affected products: vendor: Adobe
product: ColdFusion
Published: 2019-06-12T15:13:45.000Z
CVE-2019-7839 
ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Command Injection
Affected products: vendor: Adobe
product: ColdFusion
Published: 2019-06-12T15:14:04.000Z
CVE-2019-7840 
ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Deserialization of untrusted data
Affected products: vendor: Adobe
product: ColdFusion
Published: 2019-06-12T15:14:22.000Z
CVE-2019-7841 
Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: Adobe
product: Adobe Acrobat and Reader
Published: 2019-05-22T18:05:10.000Z
CVE-2019-7842 
Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation could lead to remote code execution.
Problem types: description: Use-After-Free
Affected products: vendor: Adobe
product: Adobe Media Encoder
Published: 2019-05-22T18:14:18.000Z
CVE-2019-7843 
Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.
Problem types: description: Insufficient input validation
Affected products: vendor: n/a
product: Adobe Campaign
Published: 2019-07-18T21:46:01.000Z
CVE-2019-7844 
Adobe Media Encoder version 13.0.2 has an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Problem types: description: Out-of-bounds Read
Affected products: vendor: Adobe
product: Adobe Media Encoder
Published: 2019-05-22T18:16:18.000Z
CVE-2019-7845 
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Use After Free
Affected products: vendor: Adobe
product: Adobe Flash Player
Published: 2019-06-12T15:14:42.000Z
CVE-2019-7846 
Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.
Problem types: description: Improper error handling
Affected products: vendor: n/a
product: Adobe Campaign
Published: 2019-07-18T21:45:00.000Z
CVE-2019-7847 
Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user.
Problem types: description: Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: n/a
product: Adobe Campaign
Published: 2019-07-18T21:44:23.000Z
CVE-2019-7848 
Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.
Problem types: description: Inadequate access control
Affected products: vendor: n/a
product: Adobe Campaign
Published: 2019-07-18T21:43:49.000Z
CVE-2019-7849 
A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2.
Problem types: description: Inadequate Session Handling
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:10:02.000Z
CVE-2019-7850 
Adobe Campaign Classic version 18.10.5-8984 and earlier versions have a Command injection vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user.
Problem types: description: Command injection
Affected products: vendor: n/a
product: Adobe Campaign
Published: 2019-07-18T21:43:25.000Z
CVE-2019-7851 
A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:10:29.000Z
CVE-2019-7852 
A path disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Requests for a specific file path could result in a redirect to the URL of the Magento admin panel, disclosing its location to potentially unauthorized parties.
Problem types: description: Admin Panel Path Disclosure
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:10:58.000Z
CVE-2019-7853 
A stored cross-site scripting vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to the tax notifications configuration in the Magento admin panel.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:36:58.000Z
CVE-2019-7854 
An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unauthorized disclosure of company credit history details.
Problem types: description: Insecure Direct Object Reference
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:11:32.000Z
CVE-2019-7855 
A cryptograhic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could be abused by an unauthenticated user to discover an invariant used in gift card generation.
Problem types: description: Cryptographic Flaw
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:11:55.000Z
CVE-2019-7857 
A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a shopper's cart due to an insufficiently robust anti-CSRF token implementation.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:12:21.000Z
CVE-2019-7858 
A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensitive information with an algorithm that is insufficiently resistant to brute force attacks.
Problem types: description: Cryptographic Flaw
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:12:47.000Z
CVE-2019-7859 
A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in unauthorized access to uploaded images due to insufficient access control.
Problem types: description: Path Traversal
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:13:08.000Z
CVE-2019-7860 
A cryptographically weak pseudo-rando number generator is used in multiple security relevant contexts in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
Problem types: description: Cryptographic Flaw
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:13:27.000Z
CVE-2019-7861 
Insufficient server-side validation of user input could allow an attacker to bypass file upload restrictions in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
Problem types: description: Insufficient Input Validation
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:13:46.000Z
CVE-2019-7862 
A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:14:09.000Z
CVE-2019-7863 
A stored cross-site scripting vulnerability exists in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to products and categories.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:14:29.000Z
CVE-2019-7864 
An insecure direct object reference (IDOR) vulnerability exists in the RSS feeds of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details.
Problem types: description: Insecure Direct Object Reference
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:14:48.000Z
CVE-2019-7865 
A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:15:08.000Z
CVE-2019-7866 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to edit Product information via the TinyMCE editor.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:15:32.000Z
CVE-2019-7867 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:15:50.000Z
CVE-2019-7868 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with permissions to manage tax rules.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:16:13.000Z
CVE-2019-7869 
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with permissions to manage customer groups.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:16:41.000Z
CVE-2019-7870 
Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.
Problem types: description: Insecure Library Loading (DLL hijacking)
Affected products: vendor: Adobe
product: Adobe Character Animator
Published: 2019-08-14T14:45:06.000Z
CVE-2019-7871 
A security bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 that could be abused to execute arbitrary PHP code. An authenticated user can bypass security protections that prevent arbitrary PHP script upload via form data injection.
Problem types: description: Arbitrary PHP Code Execution
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:17:01.000Z
CVE-2019-7872 
An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This can be abused by a user with admin privileges to add users to company accounts or modify existing user details.
Problem types: description: Insecure Direct Object Reference
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:17:31.000Z
CVE-2019-7873 
A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design schedule.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:17:53.000Z
CVE-2019-7874 
A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of user roles.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Magento 2
Published: 2019-08-02T21:18:13.000Z
CVE-2019-7875 
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to newsletter templates.
Problem types: description: Cross-Site Scripting
Affected products: vendor: n/a
product: Magento 1 Magento 2
Published: 2019-08-02T21:18:32.000Z