CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitrary code through crafted layout updates.
in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code into transactional email page when creating a new email template or editing existing email template.
In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML.
Acrobat, Acrobat_2017, Acrobat_3d, Acrobat_business_tools, Acrobat_dc, Acrobat_elements, Acrobat_pdfwriter, Acrobat_reader, Acrobat_reader_2017, Acrobat_reader_dc, 802.11n, Afp_server, Airport_base_station, Airport_base_station_firmware, Airport_card, Airport_express, Airport_express_base_station_firmware, Airport_extreme, Airport_extreme_base_station_firmware, Airport_utility, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2021-09-08
N/A
7.5 HIGH
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an incomplete implementation of security mechanism vulnerability. Successful exploitation could lead to information disclosure.
Acrobat, Acrobat_2017, Acrobat_3d, Acrobat_business_tools, Acrobat_dc, Acrobat_elements, Acrobat_pdfwriter, Acrobat_reader, Acrobat_reader_2017, Acrobat_reader_dc, 802.11n, Afp_server, Airport_base_station, Airport_base_station_firmware, Airport_card, Airport_express, Airport_express_base_station_firmware, Airport_extreme, Airport_extreme_base_station_firmware, Airport_utility, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2021-09-08
N/A
8.8 HIGH
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Acrobat, Acrobat_2017, Acrobat_3d, Acrobat_business_tools, Acrobat_dc, Acrobat_elements, Acrobat_pdfwriter, Acrobat_reader, Acrobat_reader_2017, Acrobat_reader_dc, 802.11n, Afp_server, Airport_base_station, Airport_base_station_firmware, Airport_card, Airport_express, Airport_express_base_station_firmware, Airport_extreme, Airport_extreme_base_station_firmware, Airport_utility, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2021-09-08
N/A
8.8 HIGH
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Acrobat, Acrobat_2017, Acrobat_3d, Acrobat_business_tools, Acrobat_dc, Acrobat_elements, Acrobat_pdfwriter, Acrobat_reader, Acrobat_reader_2017, Acrobat_reader_dc, 802.11n, Afp_server, Airport_base_station, Airport_base_station_firmware, Airport_card, Airport_express, Airport_express_base_station_firmware, Airport_extreme, Airport_extreme_base_station_firmware, Airport_utility, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2021-09-08
N/A
8.8 HIGH
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Acrobat, Acrobat_2017, Acrobat_3d, Acrobat_business_tools, Acrobat_dc, Acrobat_elements, Acrobat_pdfwriter, Acrobat_reader, Acrobat_reader_2017, Acrobat_reader_dc, 802.11n, Afp_server, Airport_base_station, Airport_base_station_firmware, Airport_card, Airport_express, Airport_express_base_station_firmware, Airport_extreme, Airport_extreme_base_station_firmware, Airport_utility, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2021-09-08
N/A
7.5 HIGH
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
Acrobat, Acrobat_2017, Acrobat_3d, Acrobat_business_tools, Acrobat_dc, Acrobat_elements, Acrobat_pdfwriter, Acrobat_reader, Acrobat_reader_2017, Acrobat_reader_dc, 802.11n, Afp_server, Airport_base_station, Airport_base_station_firmware, Airport_card, Airport_express, Airport_express_base_station_firmware, Airport_extreme, Airport_extreme_base_station_firmware, Airport_utility, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2021-09-08
N/A
9.8 CRITICAL
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Acrobat, Acrobat_2017, Acrobat_3d, Acrobat_business_tools, Acrobat_dc, Acrobat_elements, Acrobat_pdfwriter, Acrobat_reader, Acrobat_reader_2017, Acrobat_reader_dc, 802.11n, Afp_server, Airport_base_station, Airport_base_station_firmware, Airport_card, Airport_express, Airport_express_base_station_firmware, Airport_extreme, Airport_extreme_base_station_firmware, Airport_utility, 20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2021-09-08
N/A
9.8 CRITICAL
Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .