CVE-2019-8184
published 2019-10-17CVE-2019-8184: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…
PriorityP336high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
2.89%
85.5th percentile
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat_dc | >= 15.006.30060 < 15.006.30504 | 15.006.30504 |
| adobe | acrobat_dc | >= 15.008.20082 < 19.021.20047 | 19.021.20047 |
| adobe | acrobat_dc | >= 17.011.30059 < 17.011.30150 | 17.011.30150 |
| adobe | acrobat_reader_dc | >= 15.006.30060 < 15.006.30504 | 15.006.30504 |
| adobe | acrobat_reader_dc | >= 15.008.20082 < 19.021.20047 | 19.021.20047 |
| adobe | acrobat_reader_dc | >= 17.011.30059 < 17.011.30150 | 17.011.30150 |
| adobe | adobe_acrobat_and_reader | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
ruby-rack vulnerabilities
osv·2022-12-13·CVSS 5.9
CVE-2019-16782 ruby-rack vulnerabilities
ruby-rack vulnerabilities
It was discovered that Rack insecurely handled session ids. An
unauthenticated remote attacker could possibly use this issue to perform
a timing attack and hijack sessions. (CVE-2019-16782)
It was discovered that Rack was incorrectly handling cookies during
parsing, not validating them or performing the necessary integrity checks.
An attacker could possibly use this issue to overwrite existing cookie
data and gain control over a remote system's behaviour. This issue only
affected Ubuntu 14.04 ESM. (CVE-2020-8184)
It was discovered that Rack was not properly parsing data when processing
multipart POST requests. If a user or automated system were tricked into
sending a specially crafted multipart POST request to an application using
Rack, a remote attacker could
GHSA
GHSA-cwp2-v9wp-2hmq: Adobe Acrobat and Reader versions , 2019
ghsa_unreviewed·2022-05-24
CVE-2019-8184 [HIGH] CWE-125 GHSA-cwp2-v9wp-2hmq: Adobe Acrobat and Reader versions , 2019
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
No detection rules found.
No public exploits indexed.
2019-10-17
Published