Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- https://lists.apache.org/thread.html/r55609613abab203a1f2c1f3de050b63ae8f5c4a024df0d848d6915ff%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rab740e5c70424ef79fd095a4b076e752109aeee41c4256c2e5e5e142%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r2832722c31d78bef7526e2c701ba4b046736e4c851473194a247392f%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/re387dc6ca11cb0b0ce4de8e800bb91ca50fee054b80105f5cd34adcb%40%3Cdev.thrift.apache.org%3E - https://lists.apache.org/thread.html/r569b2b3da41ff45bfacfca6787a4a8728edd556e185b69b140181d9d%40%3Cdev.thrift.apache.org%3E - https://lists.apache.org/thread.html/r67a704213d133
ca6787a4a8728edd556e185b69b140181d9d%40%3Cdev.thrift.apache.org%3E - https://lists.apache.org/thread.html/r67a704213d13326771f46c84bbd84c8281bb93946e155e0e40abcb4c%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r3887b48b183b6fa43e59398bd170a99239c0a16264cb5175b5b689d0%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r36581cc7047f007dd6aadbdd34e18545ec2c1eb7ccdae6dd47a877a9%40%3Ccommits.pulsar.apache.org%3E - https://security.gentoo.org/glsa/202107-32 - https://www.oracle.com//security-alerts/cpujul2021.html - http://mail-archives.apache.org/mod_mbox/thrift-dev/201910.mbox/%3CVI1PR0101MB2142E0EA19F582429C3AEBCBB1920%40VI1PR0101MB2142.eur
il-archives.apache.org/mod_mbox/thrift-dev/201910.mbox/%3CVI1PR0101MB2142E0EA19F582429C3AEBCBB1920%40VI1PR0101MB2142.eurprd01.prod.exchangelabs.com%3E - https://lists.apache.org/thread.html/r0c606d4be9aa163d132edf8edd8eb55e7b9464063b99acbbf6e9e287%40%3Cissues.hive.apache.org%3E - https://lists.apache.org/thread.html/rb139fa1d2714822d8c6e6f3bd6f5d5c91844d313201185c409288fd9%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r934f312dd5add7276ac2de684d8b237554ff9f34479a812df5fd6aee%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r7859e767c90c8f4971dec50f801372aa64e88f143c3e8a265a36f9b4%40%3Cuser.cassandra.apache.org%3E - https://lists.apache
.html/r7859e767c90c8f4971dec50f801372aa64e88f143c3e8a265a36f9b4%40%3Cuser.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r92b7771afee2625209c36727fefdc77033964e9a1daa81ec3327e625%40%3Cuser.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r53c03e1c979b9c628d0d65e0f49dd9a9f9d7572838727ad11b750575%40%3Cuser.cassandra.apache.org%3E
CVE ID: CVE-2019-0206 State: REJECTED Published: 2019-03-14T21:00:00 Last Updated: 2019-03-14T20:57:01 Description: No description available.
CVE ID: CVE-2019-0207 State: PUBLISHED Published: 2019-09-16T16:36:14 Last Updated: 2024-08-04T17:44:15.383Z Vendors: Apache Products: Apache Tapestry Problem Types: Information Disclosure Description: Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn't filter the character `\`, so attacker can perform a path traversal attack to read any files on Windows platform. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/765be3606d865de513f6df9288842c3cf58b09a987c617a535f2b99d%40%3Cusers.tapestry.apache.org%3E - https://lists.apache.org/thread.html/bac8d6f9e1b4059b319d
3cf58b09a987c617a535f2b99d%40%3Cusers.tapestry.apache.org%3E - https://lists.apache.org/thread.html/bac8d6f9e1b4059b319d9cba6f33219a99b81623476ec896138f851c%40%3Cusers.tapestry.apache.org%3E - https://lists.apache.org/thread.html/r87523dd07886223aa086edc25fe9b8ddb9c1090f7db25b068dc30843%40%3Ccommits.tapestry.apache.org%3E - https://lists.apache.org/thread.html/r7d9c54beb1dc97dcccc58d9b5d31f0f7166f9a25ad1beba5f8091e0c%40%3Ccommits.tapestry.apache.org%3E
CVE ID: CVE-2019-0208 State: REJECTED Published: 2019-04-10T18:25:37 Last Updated: 2019-04-10T18:25:37 Description: No description available.
CVE ID: CVE-2019-0209 State: REJECTED Published: 2019-06-10T14:30:12 Last Updated: 2019-06-10T14:30:12 Description: No description available.
CVE ID: CVE-2019-0210 State: PUBLISHED Published: 2019-10-28T22:22:38 Last Updated: 2024-08-04T17:44:14.873Z Vendors: Apache Products: Apache Thrift Problem Types: Out-of-bounds read vulnerability Description: In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2020:0806 - https://access.redhat.com/errata/RHSA-2020:0811 - https://access.redhat.com/errata/RHSA-2020:0804 - https://access.redhat.com/errata/RHSA-2020:0805 - https://lists.apache.org/thread.html/r55609613abab203a1f2c1f3de050b63ae8f5c4
//access.redhat.com/errata/RHSA-2020:0805 - https://lists.apache.org/thread.html/r55609613abab203a1f2c1f3de050b63ae8f5c4a024df0d848d6915ff%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rab740e5c70424ef79fd095a4b076e752109aeee41c4256c2e5e5e142%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r2832722c31d78bef7526e2c701ba4b046736e4c851473194a247392f%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r36581cc7047f007dd6aadbdd34e18545ec2c1eb7ccdae6dd47a877a9%40%3Ccommits.pulsar.apache.org%3E - https://security.gentoo.org/glsa/202107-32 - https://www.oracle.com//security-alerts/cpujul2021.html - http://mail-archives.apache.o
rity.gentoo.org/glsa/202107-32 - https://www.oracle.com//security-alerts/cpujul2021.html - http://mail-archives.apache.org/mod_mbox/thrift-dev/201910.mbox/%3C277A46CA87494176B1BBCF5D72624A2A%40HAGGIS%3E
CVE ID: CVE-2019-0211 State: PUBLISHED Published: 2019-04-08T21:31:09.000Z Last Updated: 2025-10-21T23:45:40.583Z Vendors: Apache Products: Apache HTTP Server Problem Types: Apache HTTP Server privilege escalation from modules' scripts Description: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
rd. Non-Unix systems are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.openwall.com/lists/oss-security/2019/04/02/3 - http://www.securityfocus.com/bid/107666 - https://seclists.org/bugtraq/2019/Apr/5 - https://www.synology.com/security/advisory/Synology_SA_19_14 - http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escalation.html - https://usn.ubuntu.com/3937-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/ - https://www.debian.org/security/2019/dsa-4422 - https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5
TIWAQGT/ - https://www.debian.org/security/2019/dsa-4422 - https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5939949f9b061c05c06e0e90098ebf7aa%40%3Cusers.httpd.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/ - https://seclists.org/bugtraq/2019/Apr/16 - https://www.exploit-db.com/exploits/46676/ - https://httpd.apache.org/security/vulnerabilities_24.html - http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html - http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html - http://www.apache.org/dist/httpd/CHANG
curity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html - http://www.apache.org/dist/httpd/CHANGES_2.4.39 - https://lists.apache.org/thread.html/890507b85c30adf133216b299cc35cd8cd0346a885acfc671c04694e%40%3Cdev.community.apache.org%3E - https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b109833f5d4daf28%40%3Cdev.community.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:0746 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html - https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff220784520556884fb8ea80e69400a45509e%40%3Cdev.community.apache.org%3E - https://support.f5.com/csp/article/K32957101 - http://
4520556884fb8ea80e69400a45509e%40%3Cdev.community.apache.org%3E - https://support.f5.com/csp/article/K32957101 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html - https://security.gentoo.org/glsa/201904-20 - https://security.netapp.com/advisory/ntap-20190423-0001/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html - https://access.redhat.com/errata/RHSA-2019:0980 - https://access.redhat.com/errata/RHBA-2019:0959 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/ - https://access.redhat.com/errata/RHSA-2019:1297 - https://access.redhat.com/errata/RHSA-2019:129
EGFMIDMUSYQIZOE4TJJN/ - https://access.redhat.com/errata/RHSA-2019:1297 - https://access.redhat.com/errata/RHSA-2019:1296 - https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac%40%3Ccvs.httpd.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:1543 - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - http://www.openwall.com/lists/oss-security/2019/07/26/7 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://suppor
e.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cp
0aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12
7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2019-0212 State: PUBLISHED Published: 2019-03-28T21:24:07 Last Updated: 2024-08-04T17:44:14.866Z Vendors: Apache Products: Apache HBase Problem Types: Missing Authorization Description: In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions of the end-user. This issue is only relevant when HBase is configured with Kerberos authentication, HBase authorization is enabled, and the REST server is configured with SPNEGO authentication. This issue does not extend b
ase authorization is enabled, and the REST server is configured with SPNEGO authentication. This issue does not extend beyond the HBase REST server. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/03/27/3 - https://lists.apache.org/thread.html/66535e15007cda8f9308eec10e12ffe349e0b8b55e56ec6ee02b71d2%40%3Cdev.hbase.apache.org%3E - http://www.securityfocus.com/bid/107624 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
CVE ID: CVE-2019-0213 State: PUBLISHED Published: 2019-04-30T21:35:47 Last Updated: 2024-08-04T17:44:14.810Z Vendors: Apache Products: Apache Archiva Problem Types: Stored XSS Description: In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Apr/47 - https://lists.apache.org/thread.html/c358754a35473a61477f9d487870581a0dd7054f
https://seclists.org/bugtraq/2019/Apr/47 - https://lists.apache.org/thread.html/c358754a35473a61477f9d487870581a0dd7054ff95974628fa09f97%40%3Cusers.maven.apache.org%3E - https://lists.apache.org/thread.html/0397ddbd17b5257cc1746b31a07294a87221c5ca24e5d19d390e28f3%40%3Cusers.archiva.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/04/30/7 - http://packetstormsecurity.com/files/152681/Apache-Archiva-2.2.3-Cross-Site-Scripting.html - http://archiva.apache.org/security.html#CVE-2019-0213 - https://lists.apache.org/thread.html/ada0052409d8a4a8c4eb2c7fd6b9cd9423bc753d5fce87eb826662fb%40%3Cissues.archiva.apache.org%3E - http://www.securityfocus.com/bid/108123 - https://lists.apache.o
53d5fce87eb826662fb%40%3Cissues.archiva.apache.org%3E - http://www.securityfocus.com/bid/108123 - https://lists.apache.org/thread.html/7bcea134c3d6fa72cdc1052922ac0914f399f63f4690b7937b80127d%40%3Cannounce.apache.org%3E
CVE ID: CVE-2019-0214 State: PUBLISHED Published: 2019-04-30T21:48:54 Last Updated: 2024-08-04T17:44:14.813Z Vendors: Apache Products: Apache Archiva Problem Types: Arbitrary write/delete of files on the archiva server Description: In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/239349b6dd8f66cf87a70c287b03af451dea158b776d3dfc550b4f0e%40%3Cusers.maven.apache.org%3E - htt
sts.apache.org/thread.html/239349b6dd8f66cf87a70c287b03af451dea158b776d3dfc550b4f0e%40%3Cusers.maven.apache.org%3E - https://lists.apache.org/thread.html/5851cb0214f22ba681fb445870eeb6b01afd1fb614e45a22978d7dda%40%3Cusers.archiva.apache.org%3E - https://seclists.org/bugtraq/2019/Apr/48 - http://www.openwall.com/lists/oss-security/2019/04/30/8 - http://packetstormsecurity.com/files/152684/Apache-Archiva-2.2.3-File-Write-Delete.html - http://archiva.apache.org/security.html#CVE-2019-0214 - https://lists.apache.org/thread.html/ada0052409d8a4a8c4eb2c7fd6b9cd9423bc753d5fce87eb826662fb%40%3Cissues.archiva.apache.org%3E - http://www.securityfocus.com/bid/108124 - https://lists.apache.org/thread.htm
6662fb%40%3Cissues.archiva.apache.org%3E - http://www.securityfocus.com/bid/108124 - https://lists.apache.org/thread.html/18b670afc2f83034f47ebeb2f797c350fe60f1f2b33c95b95f467ef8%40%3Cannounce.apache.org%3E
CVE ID: CVE-2019-0215 State: PUBLISHED Published: 2019-04-08T19:25:45 Last Updated: 2024-08-04T17:44:15.365Z Vendors: Apache Products: Apache HTTP Server Problem Types: Access Control Bypass Description: In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/04/02/4 - https://lists.apache.org/thread.html/2d6bd429a0ba9af1580da896575cfca6e42bb05e7536562d4b095fcf%40%3Ccvs.httpd.apache.org%3E - http://www.securityfocus.com/bid/107667 -
0ba9af1580da896575cfca6e42bb05e7536562d4b095fcf%40%3Ccvs.httpd.apache.org%3E - http://www.securityfocus.com/bid/107667 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/ - https://httpd.apache.org/security/vulnerabilities_24.html - https://support.f5.com/csp/article/K59440504 - https://security.netapp.com/advisory/ntap-20190423-0001/ - https://access.redhat.com/errata/RHSA-2019:0980 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/
rrata/RHSA-2019:0980 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/ - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html/117bc3f09847ebf020b1bb70301ebcc105ddc446856150b63f37f8eb%40%3Cdev.httpd.apache.org%3E - https://lists.apache.org/thread.html/bc1a6d4137798565ab02e60079b6788442147f4efeb4200c665bed5b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5b1e7d66c5adf286f14f6cc0f857b6fca107444f68aed9e70eedab47%40%3Cdev.httpd.apache.org%3E - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd6528
0%3Cdev.httpd.apache.org%3E - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-
e3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7f
6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2019-0216 State: PUBLISHED Published: 2019-04-10T19:52:12 Last Updated: 2024-08-04T17:44:14.865Z Vendors: n/a Products: Apache Airflow Problem Types: Stored XSS Description: A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/2de387213d45bc626d27554a1bde7b8c67d08720901f82a50b6f4231%40%3Cdev.airflow.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/04/10/6 - http://www.securityfocus.com/bid/107869
CVE ID: CVE-2019-0217 State: PUBLISHED Published: 2019-04-08T20:11:20 Last Updated: 2024-08-04T17:44:15.383Z Vendors: Apache Products: Apache HTTP Server Problem Types: Access Control Bypass Description: In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/e0b8f6e858b1c8ec2ce8e291a2c543d438915037c7af661ab6d33808%40%3Cdev.httpd.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/04/0
e291a2c543d438915037c7af661ab6d33808%40%3Cdev.httpd.apache.org%3E - http://www.openwall.com/lists/oss-security/2019/04/02/5 - http://www.securityfocus.com/bid/107668 - https://seclists.org/bugtraq/2019/Apr/5 - https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html - https://usn.ubuntu.com/3937-1/ - https://www.debian.org/security/2019/dsa-4422 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/ - https://httpd.apache.org/security/vulnerabilities_24.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/ - https://bugzil
.org/archives/list/package-announce%40lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/ - https://bugzilla.redhat.com/show_bug.cgi?id=1695020 - https://usn.ubuntu.com/3937-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html - https://security.netapp.com/advisory/ntap-20190423-0001/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/ - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https
ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/ - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://access.redhat.com/errata/RHSA-2019:2343 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2019:3436 - https://access.redhat.com/errata/RHSA-2019:3933 - https://a