Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
832.html - https://access.redhat.com/errata/RHSA-2019:3436 - https://access.redhat.com/errata/RHSA-2019:3933 - https://access.redhat.com/errata/RHSA-2019:3935 - https://access.redhat.com/errata/RHSA-2019:3932 - https://access.redhat.com/errata/RHSA-2019:4126 - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - http
sts.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f8
4c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2019-0218 State: PUBLISHED Published: 2019-04-22T21:16:56 Last Updated: 2024-08-04T17:44:14.890Z Vendors: The Apache Software Foundation Products: Apache Pony Mail (incubating) Problem Types: Reflected XSS Description: A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/18a7ff26bc31a77e32e5e02e65dc86b1c41b610c753f8927d2cf955a%40%3Cdev.ponymail.apache.org%3E - https://www.openwall.com/lists/oss-security/2019/04/20/1 - http://www.securityfocus.com/bid/108046
CVE ID: CVE-2019-0219 State: PUBLISHED Published: 2020-01-14T14:18:22 Last Updated: 2024-08-04T17:44:15.399Z Vendors: Apache Products: Cordova Problem Types: Information Disclosure Description: A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/11/28/1 - https://lists.apache.org/thread.html/197482d5ab80c0bff4a5ec16e1b0466df38389d9a4b5331d777f14fc%40%3Cdev.cordova.apache.org%3E - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.oracle.com//security-
3Cdev.cordova.apache.org%3E - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://lists.apache.org/thread/4vtg0trdrh5203dktt4f3vkd5z2d5ndj
CVE ID: CVE-2019-0220 State: PUBLISHED Published: 2019-06-11T20:49:50 Last Updated: 2024-08-04T17:44:15.395Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: URL normalization inconsistencies Description: A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/04/02/6 - http://www.se
st Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/04/02/6 - http://www.securityfocus.com/bid/107670 - https://seclists.org/bugtraq/2019/Apr/5 - https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html - https://usn.ubuntu.com/3937-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/ - https://www.debian.org/security/2019/dsa-4422 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html - http://lists.ope
KYFNGIDOTXN3GNEJTLVCYU7/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/ - https://access.redhat.com/errata/RHSA-2019:2343 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://a
apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3436 - https://access.redhat.com/errata/RHSA-2019:4126 - https://access.redhat.com/errata/RHSA-2020:0250 - https://access.redhat.com/errata/RHSA-2020:0251 - https://lists.apache.org/thread.html/r31f46d1f16ffcafa68058596b21f6eaf6d352290e522690a1cdccdd7%40%3Cbugs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://ww
ache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://httpd.apache.org/security/vulnerabilities_24.html - https://support.f5.com/csp/article/K44591505 - https://security.netapp.com/advisory/ntap-20190625-0007/ - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us - https://lists.apache.org/thread.html/rf6449464fd8b74377
/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https
ts.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2019-0221 State: PUBLISHED Published: 2019-05-28T21:01:28 Last Updated: 2024-08-04T17:44:15.953Z Vendors: Apache Products: Apache Tomcat Problem Types: Cross-Site Scripting Description: The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/May/50 - https://lists.debian.org/debian-lts-announce/2019/05/msg00044.html - http://w
/seclists.org/fulldisclosure/2019/May/50 - https://lists.debian.org/debian-lts-announce/2019/05/msg00044.html - http://www.securityfocus.com/bid/108545 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQTZ5BJ5F4KV6N53SGNKSW3UY5DBIQ46/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00090.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPHQEL5AQ6LZSZD2Y6TYZ4RC3WI7NXJ3/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00054.html - https://lists.debian.org/debian-lts-announce/2019/08/msg00015.html - https://usn.ubuntu.com/4128-1/ - https://usn.ubuntu.com/4
//lists.debian.org/debian-lts-announce/2019/08/msg00015.html - https://usn.ubuntu.com/4128-1/ - https://usn.ubuntu.com/4128-2/ - https://access.redhat.com/errata/RHSA-2019:3929 - https://access.redhat.com/errata/RHSA-2019:3931 - https://www.debian.org/security/2019/dsa-4596 - https://seclists.org/bugtraq/2019/Dec/43 - https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - h
lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E - https://security.gentoo.org/glsa/202003-43 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cp
rts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://lists.apache.org/thread.html/6e6e9eacf7b28fd63d249711e9d3ccd4e0a83f556e324aee37be5a8c%40%3Cannounce.tomcat.apache.org%3E - https://security.netapp.com/advisory/ntap-20190606-0001/ - https://wwws.nightwatchcybersecurity.com/2019/05/27/xss-in-ssi-printenv-command-apache-tomcat-cve-2019-0221/ - https://support.f5.com/csp/article/K13184144?utm_source=f5support&amp%3Butm_medium=RSS - http://packetstormsecurity.com/files/163457/Apache-Tomcat-9.0.0.M1-Cross-Site-Scripting.html
CVE ID: CVE-2019-0222 State: PUBLISHED Published: 2019-03-28T21:16:12 Last Updated: 2024-08-04T17:44:15.392Z Vendors: Apache Products: Apache ActiveMQ Problem Types: Information Disclosure Description: In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc%40%3Ccommits.activemq.apache.org%3E - https://lists.apache.org/thread.html/7da9636557118178b1690ba0af49c8a7b7b97d925218b5774622f488%40%3Cusers.activemq.apache.org%3E - https://lists.apache.org/thread.html
7118178b1690ba0af49c8a7b7b97d925218b5774622f488%40%3Cusers.activemq.apache.org%3E - https://lists.apache.org/thread.html/d1e334bd71d6e68462c62c726fe6db565c7a6283302f9c1feed087fa%40%3Ccommits.activemq.apache.org%3E - https://lists.apache.org/thread.html/71640324661c1b6d0b6708bd4fb20170e1b979370a4b8cddc4f8d485%40%3Cdev.activemq.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/03/27/2 - https://lists.apache.org/thread.html/fcbe6ad00f1de142148c20d813fae3765dc4274955e3e2f3ca19ff7b%40%3Cdev.activemq.apache.org%3E - https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E - https://lists.apache.org/thread.html/0
7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E - https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1%40%3Cdev.activemq.apache.org%3E - http://www.securityfocus.com/bid/107622 - https://lists.apache.org/thread.html/rb698ed085f79e56146ca24ab359c9ef95846618675ea1ef402e04a6d%40%3Ccommits.activemq.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - http://activemq.apache.org/security-advisories.data/CVE-2019-0222-announcement.txt - https://security.netapp.com/advisory/
tp://activemq.apache.org/security-advisories.data/CVE-2019-0222-announcement.txt - https://security.netapp.com/advisory/ntap-20190502-0006/ - https://lists.apache.org/thread.html/re4672802b0e5ed67c08c9e77057d52138e062f77cc09581b723cf95a%40%3Ccommits.activemq.apache.org%3E - https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E - https://lists.debian.org/debian-lts-announce/2021/03/msg00004.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00005.html
CVE ID: CVE-2019-0223 State: PUBLISHED Published: 2019-04-23T15:57:07 Last Updated: 2024-08-04T17:44:15.919Z Vendors: Apache Software Foundation Products: Apache Qpid Proton Problem Types: Man-in-the-middle Attack Description: While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic. Additional Analyst Notes: - CVE Progra
attack could be constructed if an attacker can arrange to intercept TLS traffic. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/49c83f0acce5ceaeffca51714ec2ba0f0199bcb8f99167181bba441b%40%3Cdev.qpid.apache.org%3E - https://lists.apache.org/thread.html/3adb2f020f705b4fd453982992a68cd10f9d5ac728b699efdb73c1f5%40%3Cdev.qpid.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/04/23/4 - https://lists.apache.org/thread.html/d9c9a882a292e2defaed1f954528c916fb64497ce57db652727e39b0%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f%40%3Cusers.qpid.apache.org%3E
ps://lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f%40%3Cusers.qpid.apache.org%3E - https://issues.apache.org/jira/browse/PROTON-2014?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel - https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E - http://www.securityfocus.com/bid/108044 - https://access.redhat.com/errata/RHSA-2019:0886 - https://access.redhat.com/errata/RHSA-2019:1399 - https://access.redhat.com/errata/RHSA-2019:1400 - https://access.redhat.com/errata/RHSA-2019:1398 - https://access.redhat.com/errata/RHSA-2019:2777 - https://access.redhat.com/errata/RHSA
dhat.com/errata/RHSA-2019:1398 - https://access.redhat.com/errata/RHSA-2019:2777 - https://access.redhat.com/errata/RHSA-2019:2778 - https://access.redhat.com/errata/RHSA-2019:2779 - https://access.redhat.com/errata/RHSA-2019:2780 - https://access.redhat.com/errata/RHSA-2019:2781 - https://access.redhat.com/errata/RHSA-2019:2782
CVE ID: CVE-2019-0224 State: PUBLISHED Published: 2019-03-28T21:00:53 Last Updated: 2024-08-04T17:44:15.405Z Vendors: Apache Products: Apache JSPWiki Problem Types: Cross-site scripting vulnerability Description: In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/b4b4992a93d899050c1117a07c3c7fc9a175ec0672ab97065228de67%40%3Cdev.jspwiki.apache.org%3E - https://jspwiki-wiki
read.html/b4b4992a93d899050c1117a07c3c7fc9a175ec0672ab97065228de67%40%3Cdev.jspwiki.apache.org%3E - https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-0224 - http://www.securityfocus.com/bid/107631 - https://lists.apache.org/thread.html/e42d6e93384d4a33e939989cd00ea2a06ccf1e7bb1e6bdd3bf5187c1%40%3Ccommits.jspwiki.apache.org%3E - https://lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe82d3a42d742083c528f58d192dfd16%40%3Ccommits.jspwiki.apache.org%3E
CVE ID: CVE-2019-0225 State: PUBLISHED Published: 2019-03-28T21:07:57 Last Updated: 2024-08-04T17:44:15.389Z Vendors: Apache Products: Apache JSPWiki Problem Types: Local File Inclusion (limited ROOT folder) vulnerability leads to user information disclosure Description: A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/4f19fdbd8b9c4caf6137a459d723f4ec60379b033ed69277eb4e0af9%40%3Cuser.jspwiki.apache.org%3E - https://lists.apache.org/th
l/4f19fdbd8b9c4caf6137a459d723f4ec60379b033ed69277eb4e0af9%40%3Cuser.jspwiki.apache.org%3E - https://lists.apache.org/thread.html/6251c06cb11e0b495066be73856592dbd7ed712487ef283d10972831%40%3Cdev.jspwiki.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/03/26/2 - https://lists.apache.org/thread.html/03ddbcb1d6322e04734e65805a147a32bcfdb71b8fc5821fb046ba8d%40%3Cannounce.apache.org%3E - https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-0225 - http://www.securityfocus.com/bid/107627 - https://lists.apache.org/thread.html/e42d6e93384d4a33e939989cd00ea2a06ccf1e7bb1e6bdd3bf5187c1%40%3Ccommits.jspwiki.apache.org%3E - https://lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe
e7bb1e6bdd3bf5187c1%40%3Ccommits.jspwiki.apache.org%3E - https://lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe82d3a42d742083c528f58d192dfd16%40%3Ccommits.jspwiki.apache.org%3E
CVE ID: CVE-2019-0226 State: PUBLISHED Published: 2019-05-09T13:31:47 Last Updated: 2024-08-04T17:44:15.370Z Vendors: Apache Products: Karaf Problem Types: Filesystem access Description: Apache Karaf Config service provides a install method (via service or MBean) that could be used to travel in any directory and overwrite existing file. The vulnerability is low if the Karaf process user has limited permission on the filesystem. Any Apache Karaf version before 4.2.5 is impacted. User should upgrade to Apache Karaf 4.2.5 or later. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/1baa6f1df0e95fb1cd679067117354af2ab4423277d9a0ff6e8bf790%40%3Cd
iner: References: - https://lists.apache.org/thread.html/1baa6f1df0e95fb1cd679067117354af2ab4423277d9a0ff6e8bf790%40%3Cdev.karaf.apache.org%3E - https://lists.apache.org/thread.html/r218c7e017af0a860ae21bf7ab77520fd2070c8f52db680eeec03a266%40%3Ccommits.karaf.apache.org%3E
CVE ID: CVE-2019-0227 State: PUBLISHED Published: 2019-05-01T20:03:49 Last Updated: 2024-08-04T17:44:15.943Z Vendors: Apache Products: Apache Axis 1.4 Problem Types: SSRF Description: A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue. Additional Analyst Notes: - CVE Program Container: References: - https://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-a
E Program Container: References: - https://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-apache-axis/ - https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpujan2021.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://lists.apache.org/thread.html/r3a5baf5d76f1f2181be7f54da3deab70d7a38b5
acle.com/security-alerts/cpuApr2021.html - https://lists.apache.org/thread.html/r3a5baf5d76f1f2181be7f54da3deab70d7a38b5660b387583d05a8cd%40%3Cjava-user.axis.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2019-0228 State: PUBLISHED Published: 2019-04-17T14:07:34 Last Updated: 2024-08-04T17:44:15.952Z Vendors: n/a Products: Apache PDFBox Problem Types: XML External Entity (XXE) attacks Description: Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/bc8db1bf459f1ad909da47350ed554ee745abe9f25f2b50cad4e06dd%40%3Cserver-dev.james.apache.org%3E - https://lists.apache.org/thread.html/be86fcd7cd423a3fe6b73a3cb9d7cac0b619d0deb99e6b5d172c98f4%40%3Ccommits.tika.apache.org%
ps://lists.apache.org/thread.html/be86fcd7cd423a3fe6b73a3cb9d7cac0b619d0deb99e6b5d172c98f4%40%3Ccommits.tika.apache.org%3E - https://lists.apache.org/thread.html/8a19bd6d43e359913341043c2a114f91f9e4ae170059539ad1f5673c%40%3Ccommits.tika.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPOGHJ5CVMUVCRQU7APBAN5IVZGZFDX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HKVPTJWZGUB4MH4AAOWMRJHRDBYFHGJ/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/r32b8102392a174b17fd19509a9e76047f74852b77b7bf46af95e45a2%40%3Cserver-dev.james.apache.
s://lists.apache.org/thread.html/r32b8102392a174b17fd19509a9e76047f74852b77b7bf46af95e45a2%40%3Cserver-dev.james.apache.org%3E - https://lists.apache.org/thread.html/r0a2141abeddae66dd57025f1681c8425834062b7c0c7e0b1d830a95d%40%3Cusers.pdfbox.apache.org%3E - https://www.oracle.com/security-alerts/cpuApr2021.html - https://lists.apache.org/thread.html/1a3756557f8cb02790b7183ccf7665ae23f608a421c4f723113bca79%40%3Cusers.pdfbox.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html