Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-2971 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-15T18:45:26.151Z Vendors: Oracle Corporation Products: Outside In Technology Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Description: Vuln
CVE ID: CVE-2019-2972 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-15T18:45:12.636Z Vendors: Oracle Corporation Products: Outside In Technology Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Description: Vuln
CVE ID: CVE-2019-2973 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:27:09.355Z Vendors: Oracle Corporation Products: Java Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Description: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exp
Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vu
load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2019:3134 - https://access.redhat.com/errata/RHSA-2019:3135 - https://security.netapp.com/advisory/ntap-20191017-0001/ - https:/
4 - https://access.redhat.com/errata/RHSA-2019:3135 - https://security.netapp.com/advisory/ntap-20191017-0001/ - https://access.redhat.com/errata/RHSA-2019:3136 - https://www.debian.org/security/2019/dsa-4546 - https://seclists.org/bugtraq/2019/Oct/27 - https://seclists.org/bugtraq/2019/Oct/31 - https://www.debian.org/security/2019/dsa-4548 - https://access.redhat.com/errata/RHSA-2019:3157 - https://access.redhat.com/errata/RHSA-2019:3158 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - https://access.redhat.com/errata/RHSA-2019:4110 - https://access.redhat.com/errata/RHSA-2019:4109 - h
11/msg00066.html - https://access.redhat.com/errata/RHSA-2019:4110 - https://access.redhat.com/errata/RHSA-2019:4109 - https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html - https://access.redhat.com/errata/RHSA-2019:4113 - https://access.redhat.com/errata/RHSA-2019:4115 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - https://usn.ubuntu.com/4223-1/ - https://access.redhat.com/errata/RHSA-2020:0006 - https://access.redhat.com/errata/RHSA-2020:0046
CVE ID: CVE-2019-2974 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:27:00.655Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability a
rsions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://security.netapp.com/advisory/ntap-20191
//www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://security.netapp.com/advisory/ntap-20191017-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7X5D3O4TOQ57KL5FLQEXH2JB2UQYHCUZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DTUCXX5XXPNPFV2PHP6IESGTCFMZOFP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKCJLNRK6RHFAHV7ZFD3XO7HNSBU3XOL/ - https://usn.ubuntu.com/4195-1/ - https://usn.ubuntu.com/4195-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html - https://security.gentoo.or
tu.com/4195-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00037.html - https://security.gentoo.org/glsa/202105-27
CVE ID: CVE-2019-2975 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:26:53.533Z Vendors: Oracle Corporation Products: Java Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Description: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported ver
cription: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running san
OS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/techne
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2019:3134 - https://access.redhat.com/errata/RHSA-2019:3135 - https://security.netapp.com/advisory/ntap-20191017-0001/ - https://access.redhat.com/errata/RHSA-2019:3136 - https://www.debian.org/security/2019/dsa-4546 - https://seclists.org/bugtraq/2019/Oct/27 - https://seclists.org/bugtraq/2019/Oct/31 - https://www.debian.org/security/2019/dsa-4548 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/m
se.org/opensuse-security-announce/2019-11/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - https://access.redhat.com/errata/RHSA-2019:4113 - https://access.redhat.com/errata/RHSA-2019:4115 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - https://usn.ubuntu.com/4223-1/ - https://access.redhat.com/errata/RHSA-2020:0006 - https://access.redhat.com/errata/RHSA-2020:0046 - https://kc.mcafee.com/corporate/index?page=content&id=SB10315
CVE ID: CVE-2019-2976 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:26:46.351Z Vendors: Oracle Corporation Products: Primavera P6 Enterprise Project Portfolio Management Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or comp
additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. Description: Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 17.1.0-17.12.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is
ement. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-2977 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:26:37.986Z Vendors: Oracle Corporation Products: Java Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Description: Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability all
onent: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for securit
8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2019:3135 - https://security.netapp.com/advisory/ntap-20191017-0001/ - https://www.de
ps://access.redhat.com/errata/RHSA-2019:3135 - https://security.netapp.com/advisory/ntap-20191017-0001/ - https://www.debian.org/security/2019/dsa-4546 - https://seclists.org/bugtraq/2019/Oct/31 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - https://usn.ubuntu.com/4223-1/
CVE ID: CVE-2019-2978 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:26:28.761Z Vendors: Oracle Corporation Products: Java Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Description: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult
ing). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. T
that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://access.redhat.com/errata/RHSA-2019:3134 - https://access.redhat.com/errata/RHSA-2019:3135 - https://security.netapp.com/advisory/ntap-20191017-0001/ - h
19:3134 - https://access.redhat.com/errata/RHSA-2019:3135 - https://security.netapp.com/advisory/ntap-20191017-0001/ - https://access.redhat.com/errata/RHSA-2019:3136 - https://www.debian.org/security/2019/dsa-4546 - https://seclists.org/bugtraq/2019/Oct/27 - https://seclists.org/bugtraq/2019/Oct/31 - https://www.debian.org/security/2019/dsa-4548 - https://access.redhat.com/errata/RHSA-2019:3157 - https://access.redhat.com/errata/RHSA-2019:3158 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - https://access.redhat.com/errata/RHSA-2019:4110 - https://access.redhat.com/errata/RHSA-2019:41
/2019-11/msg00066.html - https://access.redhat.com/errata/RHSA-2019:4110 - https://access.redhat.com/errata/RHSA-2019:4109 - https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html - https://access.redhat.com/errata/RHSA-2019:4113 - https://access.redhat.com/errata/RHSA-2019:4115 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - https://usn.ubuntu.com/4223-1/ - https://access.redhat.com/errata/RHSA-2020:0006 - https://access.redhat.com/errata/RHSA-2020:0046
CVE ID: CVE-2019-2979 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:26:22.201Z Vendors: Oracle Corporation Products: FLEXCUBE Direct Banking Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Direct Banking accessible data. Description: Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applica
ible data. Description: Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Payments). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 5.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:
E Direct Banking accessible data. CVSS 3.0 Base Score 5.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-2980 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:26:15.452Z Vendors: Oracle Corporation Products: FLEXCUBE Direct Banking Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Direct Banking accessible data. Description: Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: eMail). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploit
ial Services Applications (component: eMail). Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2019-2981 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:26:07.244Z Vendors: Oracle Corporation Products: Java Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Description: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exp
CVE ID: CVE-2019-2982 State: PUBLISHED Published: 2019-10-16T17:40:57 Last Updated: 2024-10-01T16:25:51.648Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with ne
ersions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://security.netapp.com/advisory/ntap-20191017-0002/ - https://lists.fedoraproje
-advisory/cpuoct2019-5072832.html - https://security.netapp.com/advisory/ntap-20191017-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7X5D3O4TOQ57KL5FLQEXH2JB2UQYHCUZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DTUCXX5XXPNPFV2PHP6IESGTCFMZOFP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKCJLNRK6RHFAHV7ZFD3XO7HNSBU3XOL/ - https://usn.ubuntu.com/4195-1/