Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
mation disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/11/msg00005.html - https://access.redhat.com/errata/RHSA-2018:0316 - https://svn.apache.org/viewvc?view=revision&revision=1807976 - http://www.securitytracker.com/id/1042004 - https://access.redhat.com/errata/RHSA-2017:3475 - https://access.redhat.com/errata/RHSA-2018:0465 - http://www.apache.org/dist/apr/Announcement1.x.html - https://access.redhat.com/errata/RHSA-2017:3270 - https://lists.apache.org/thread.html/12489f2e4a9f9d390235c16298aca0d2065
tps://access.redhat.com/errata/RHSA-2017:3270 - https://lists.apache.org/thread.html/12489f2e4a9f9d390235c16298aca0d20658789de80d553513977f13%40%3Cannounce.apache.org%3E - https://access.redhat.com/errata/RHSA-2017:3476 - https://access.redhat.com/errata/RHSA-2018:1253 - https://access.redhat.com/errata/RHSA-2017:3477 - https://access.redhat.com/errata/RHSA-2018:0466 - http://www.securityfocus.com/bid/101560 - https://lists.apache.org/thread.html/rcc48a0acebbd74bbdeebc02ff228bb72c0631b21823fffe27d4691e9%40%3Ccommits.apr.apache.org%3E - https://lists.apache.org/thread.html/r270dd5022db194b78acaf509216a33c85f3da43757defa05cc766339%40%3Ccommits.apr.apache.org%3E - https://lists.apache.org/threa
270dd5022db194b78acaf509216a33c85f3da43757defa05cc766339%40%3Ccommits.apr.apache.org%3E - https://lists.apache.org/thread.html/ra2868b53339a6af65577146ad87016368c138388b09bff9d2860f50e%40%3Cdev.apr.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/08/23/1 - https://lists.apache.org/thread.html/rb1f3c85f50fbd924a0051675118d1609e57957a02ece7facb723155b%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/ra38094406cc38a05218ebd1158187feda021b0c3a1df400bbf296af8%40%3Cdev.apr.apache.org%3E - https://lists.debian.org/debian-lts-announce/2022/01/msg00023.html
CVE ID: CVE-2017-12614 State: PUBLISHED Published: 2018-08-06T13:00:00Z Last Updated: 2024-09-16T21:57:17.157Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: XSS Vulnerability Description: It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/2c72480c76619c5e7793f0d213c34082f0598eaa4d212172f068940
am Container: References: - https://lists.apache.org/thread.html/2c72480c76619c5e7793f0d213c34082f0598eaa4d212172f068940f%40%3Cdev.airflow.apache.org%3E
CVE ID: CVE-2017-12615 State: PUBLISHED Published: 2017-09-19T13:00:00.000Z Last Updated: 2025-10-21T23:55:34.335Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Remote Code Execution Description: When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:3113 - h
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:3113 - https://access.redhat.com/errata/RHSA-2017:3080 - http://www.securitytracker.com/id/1039392 - https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7daceb118ffbf23f8c%40%3Cannounce.tomcat.apache.org%3E - https://www.synology.com/support/security/Synology_SA_17_54_Tomcat - https://access.redhat.com/errata/RHSA-2018:0465 - http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html - https://access.redhat.com/errata/RHSA-2017:3114 - http://www.securityfocus.com/bid/100901 - https://access.redhat.com/errata/RHSA-2018:0466 - https
rrata/RHSA-2017:3114 - http://www.securityfocus.com/bid/100901 - https://access.redhat.com/errata/RHSA-2018:0466 - https://www.exploit-db.com/exploits/42953/ - https://security.netapp.com/advisory/ntap-20171018-0001/ - https://github.com/breaktoprotect/CVE-2017-12615 - https://access.redhat.com/errata/RHSA-2017:3081 - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - ht
lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2017-12616 State: PUBLISHED Published: 2017-09-19T13:00:00Z Last Updated: 2024-09-16T19:04:33.141Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Information Disclosure Description: When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039393 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us - https://www.synology.com/support/security/
.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us - https://www.synology.com/support/security/Synology_SA_17_54_Tomcat - https://access.redhat.com/errata/RHSA-2018:0465 - https://usn.ubuntu.com/3665-1/ - http://www.securityfocus.com/bid/100897 - https://access.redhat.com/errata/RHSA-2018:0466 - https://security.netapp.com/advisory/ntap-20171018-0001/ - https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6%40%3Cannounce.tomcat.apache.org%3E - https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.or
https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2017-12617 State: PUBLISHED Published: 2017-10-03T15:00:00.000Z Last Updated: 2025-10-21T23:55:32.381Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Remote Code Execution Description: When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
t contained would be executed by the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:3113 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://access.redhat.com/errata/RHSA-2017:3080 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us - https://access.redhat.com/errata/RHSA-2018:0269 - https://www.exploit-db.com/exploits/42966/ - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us - https://access.redha
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us - https://access.redhat.com/errata/RHSA-2018:0270 - https://access.redhat.com/errata/RHSA-2018:0271 - https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html - https://access.redhat.com/errata/RHSA-2018:2939 - https://access.redhat.com/errata/RHSA-2018:0465 - https://usn.ubuntu.com/3665-1/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://access.redhat.com/errata/RHSA-2018:0268 - https://access.redhat.com/errata/RHSA-2017:3114 - https://www.exploit-db.com/exploits/43008/ - http://www.securitytracker.com/id/1039552 - http://www.securityfocus.com/bi
https://www.exploit-db.com/exploits/43008/ - http://www.securitytracker.com/id/1039552 - http://www.securityfocus.com/bid/100954 - https://access.redhat.com/errata/RHSA-2018:0275 - https://access.redhat.com/errata/RHSA-2018:0466 - https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E - https://security.netapp.com/advisory/ntap-20171018-0002/ - https://security.netapp.com/advisory/ntap-20180117-0002/ - https://access.redhat.com/errata/RHSA-2017:3081 - https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/343558d
a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://support.f5.com/csp/article/K53173544 - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b
https://support.f5.com/csp/article/K53173544 - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.or
ad.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apa
/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2017-12618 State: PUBLISHED Published: 2017-10-24T01:00:00 Last Updated: 2024-08-05T18:43:56.405Z Vendors: Apache Software Foundation Products: Apache Portable Runtime Problem Types: n/a Description: Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/11/msg00006.html - http://www.securitytrac
am Container: References: - https://lists.debian.org/debian-lts-announce/2017/11/msg00006.html - http://www.securitytracker.com/id/1042004 - http://mail-archives.apache.org/mod_mbox/apr-dev/201710.mbox/%3CCACsi252POs4toeJJciwg09_eu2cO3XFg%3DUqsPjXsfjDoeC3-UQ%40mail.gmail.com%3E - http://www.securityfocus.com/bid/101558
CVE ID: CVE-2017-12619 State: PUBLISHED Published: 2019-04-23T14:45:16 Last Updated: 2024-08-05T18:43:56.428Z Vendors: Apache Software Foundation Products: Apache Zeppelin Problem Types: Session Fixation Description: Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by "stone lone". Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/ff6b995a5a3ba8db4d6b14b4d9dd487e7bf2e3bdd5b375b64a25fd06%40%3Cusers.zeppelin.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/04/23/1 - https://zeppelin.apache.org/releases/zeppelin-release-0.7.3.html - htt
ww.openwall.com/lists/oss-security/2019/04/23/1 - https://zeppelin.apache.org/releases/zeppelin-release-0.7.3.html - http://www.securityfocus.com/bid/108050
CVE ID: CVE-2017-12620 State: PUBLISHED Published: 2017-10-02T14:00:00Z Last Updated: 2024-09-16T19:15:51.072Z Vendors: Apache Software Foundation Products: Apache OpenNLP Problem Types: Information Disclosure Description: When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache OpenNLP are affected. Additional Analyst Notes: - CVE Program Container: References: - http://opennlp.apache.org/news/cve-2017-12620.html
CVE ID: CVE-2017-12621 State: PUBLISHED Published: 2017-09-27T16:00:00Z Last Updated: 2024-09-16T16:14:10.234Z Vendors: Apache Software Foundation Products: Apache Commons Jelly Problem Types: Information Disclosure Description: During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a "SYSTEM" entity with a URL and that entity is used in the body of the Jelly file, during parser instantiation the parser will attempt to connect to said URL. This could lead to XML External Entity (XXE) attacks in Apache Commons Jelly before 1.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/JELLY-293 - https://l
tional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/JELLY-293 - https://lists.apache.org/thread.html/f1fc3f2c45264af44ce782d54b5908ac95f02bf7ad88bb57bfb04b73%40%3Cdev.commons.apache.org%3E - http://www.securityfocus.com/bid/101052 - http://www.securitytracker.com/id/1039444
CVE ID: CVE-2017-12622 State: PUBLISHED Published: 2018-01-10T03:00:00Z Last Updated: 2024-09-17T02:01:38.575Z Vendors: Apache Software Foundation Products: Apache Geode Problem Types: Improper Access Control Description: When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status information and control cluster members even without CLUSTER:MANAGE privileges. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/560578479dabbdc93d0ee8746b7c857549202ef82f43aa22496aa589%40%3Cuser.geode.apache.org%3E
CVE ID: CVE-2017-12623 State: PUBLISHED Published: 2017-10-10T18:00:00Z Last Updated: 2024-09-16T16:17:35.807Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: Information Disclosure Description: An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.org/security.html#CVE-2017-12623
CVE ID: CVE-2017-12624 State: PUBLISHED Published: 2017-11-14T16:00:00Z Last Updated: 2024-09-17T00:05:34.380Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: Denial of Service Description: Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property "attachment-max
are greater than 300 characters will be rejected by default. This value is configurable via the property "attachment-max-header-size". Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2428 - http://www.securitytracker.com/id/1040486 - https://access.redhat.com/errata/RHSA-2018:2424 - https://access.redhat.com/errata/RHSA-2018:2423 - https://access.redhat.com/errata/RHSA-2018:2425 - http://www.securityfocus.com/bid/101859 - http://cxf.apache.org/security-advisories.data/CVE-2017-12624.txt.asc - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.
rg/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da
e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2017-12625 State: PUBLISHED Published: 2017-11-01T13:00:00Z Last Updated: 2024-09-16T22:30:24.930Z Vendors: Apache Software Foundation Products: Apache Hive Problem Types: Information Disclosure Description: Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does not happen correctly on the table for masked columns. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/hive-user/201710.mbox/%3C3791103E-80D5-4E75-AF23-6F8ED54DDEBE
er: References: - http://mail-archives.apache.org/mod_mbox/hive-user/201710.mbox/%3C3791103E-80D5-4E75-AF23-6F8ED54DDEBE%40apache.org%3E - http://www.securityfocus.com/bid/101686
CVE ID: CVE-2017-12626 State: PUBLISHED Published: 2018-01-29T17:00:00Z Last Updated: 2024-09-16T18:45:21.181Z Vendors: Apache Software Foundation Products: Apache POI Problem Types: Denial of Service Vulnerabilities Description: Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and 61294), and 2) Out of Memory Exceptions while parsing crafted DOC, PPT and XLS (POI bugs 52372 and 61295). Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1322 - https://lists.apache.org/thread.html/453d9af5dbabaccd9afb58d27279a9dbfe8e
ps://access.redhat.com/errata/RHSA-2018:1322 - https://lists.apache.org/thread.html/453d9af5dbabaccd9afb58d27279a9dbfe8e35f4e5ea1645ddd6960b%40%3Cdev.poi.apache.org%3E - http://www.securityfocus.com/bid/102879 - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.oracle.com/security-alerts/cpujan2021
an2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com/security-alerts/cpuApr2021.html
CVE ID: CVE-2017-12627 State: PUBLISHED Published: 2018-03-01T14:00:00Z Last Updated: 2024-09-17T01:15:50.981Z Vendors: Apache Software Foundation Products: Apache Xerces C++ Problem Types: Denial of Service Description: In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/03/msg00032.html - http://xerces.apache.org/xerces-c/secadv/CVE-2017-12627.txt - http://www.securityfocus.com/bid/103219 - http://seclists.org/oss-sec/2018/q1/203 - https://kc.mcafee.com/corporate/index?page=cont
securityfocus.com/bid/103219 - http://seclists.org/oss-sec/2018/q1/203 - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2017-12628 State: PUBLISHED Published: 2017-10-20T15:00:00 Last Updated: 2024-08-05T18:43:56.437Z Vendors: Apache Software Foundation Products: Apache James Problem Types: Privilege escalation Description: The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privilege escalation. Release 3.0.1 upgrades the incriminated library. Additional Analyst Notes: - CVE Program Container: References: - https://www.mail-archive.com/server-user%40james.apache.org/msg15633.htm
t Notes: - CVE Program Container: References: - https://www.mail-archive.com/server-user%40james.apache.org/msg15633.html - http://www.securityfocus.com/bid/101532