rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-1295 
In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a serialized object to one of the deserialization endpoints of some Ignite components - discovery SPI, Ignite persistence, Memcached endpoint, socket steamer.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Ignite
Published: 2018-04-02T17:00:00.000Z
CVE-2018-1296 
In Apache Hadoop 3.0.0-alpha1 to 3.0.0, 2.9.0, 2.8.0 to 2.8.3, and 2.5.0 to 2.7.5, HDFS exposes extended attribute key/value pairs during listXAttrs, verifying only path-level search access to the directory rather than path-level read permission to the referent.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Hadoop
Published: 2019-02-07T22:00:00.000Z
CVE-2018-1297 
When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
Problem types: description: Unauthorized code access
Affected products: vendor: Apache Software Foundation
product: Apache JMeter
Published: 2018-02-13T12:00:00.000Z
CVE-2018-1298 
A Denial of Service vulnerability was found in Apache Qpid Broker-J 7.0.0 in functionality for authentication of connections for AMQP protocols 0-8, 0-9, 0-91 and 0-10 when PLAIN or XOAUTH2 SASL mechanism is used. The vulnerability allows unauthenticated attacker to crash the broker instance. AMQP 1.0 and HTTP connections are not affected. An authentication of incoming AMQP connections in Apache Qpid Broker-J is performed by special entities called "Authentication Providers". Each Authentication Provider can support several SASL mechanisms which are offered to the connecting clients as part of SASL negotiation process. The client chooses the most appropriate SASL mechanism for authentication. Authentication Providers of following types supports PLAIN SASL mechanism: Plain, PlainPasswordFile, SimpleLDAP, Base64MD5PasswordFile, MD5, SCRAM-SHA-256, SCRAM-SHA-1. XOAUTH2 SASL mechanism is supported by Authentication Providers of type OAuth2. If an AMQP port is configured with any of these Authentication Providers, the Broker may be vulnerable.
Problem types: description: Denial of Service Vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache Qpid Broker-J
Published: 2018-02-09T14:00:00.000Z
CVE-2018-1299 
In Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files through the Allura web application. Some webservers used with Allura, such as Nginx, Apache/mod_wsgi or paster may prevent the attack from succeeding. Others, such as gunicorn do not prevent it and leave Allura vulnerable.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Allura
Published: 2018-02-06T19:00:00.000Z
CVE-2018-1301 
A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.
Problem types: description: Possible out of bound access after failure in reading the HTTP request
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2018-03-26T15:00:00.000Z
CVE-2018-1302 
When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.
Problem types: description: Possible write of after free on HTTP/2 stream shutdown
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2018-03-26T15:00:00.000Z
CVE-2018-1303 
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.
Problem types: description: Possible out of bound read in mod_cache_socache
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2018-03-26T15:00:00.000Z
CVE-2018-1304 
The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2018-02-28T20:00:00.000Z
CVE-2018-1305 
Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2018-02-23T23:00:00.000Z
CVE-2018-1306 
The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Pluto
Published: 2018-06-27T18:00:00.000Z
CVE-2018-1307 
In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD type of attacks. Mitigation is to use 3.3.5.
Problem types: description: XML Entity Expansion
Affected products: vendor: Apache Software Foundation
product: Apache jUDDI
Published: 2018-02-09T19:00:00.000Z
CVE-2018-1308 
This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlinexml>` parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Solr
Published: 2018-04-09T13:00:00.000Z
CVE-2018-1309 
Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disable external general entity parsing and disallow doctype declarations was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Problem types: description: Information Disclosure / Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Published: 2018-05-23T14:00:00.000Z
CVE-2018-1310 
Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254 announcement for more information. The fix to upgrade the activemq-client library to 5.15.3 was applied on the Apache NiFi 1.6.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache NiFi
Published: 2018-05-23T14:00:00.000Z
CVE-2018-1311 
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
Problem types: description: Denial of Service and Remote Exploit
Affected products: vendor: Apache Software Foundation
product: Apache Xerces-C
Published: 2019-12-18T00:00:00.000Z
CVE-2018-1312 
In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.
Problem types: description: Authentication replay mitigation
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2018-03-26T15:00:00.000Z
CVE-2018-1313 
In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is successful. If the server is using a policy file, the policy file must permit the database location to be read for the attack to work. The default Derby Network Server policy file distributed with the affected releases includes a permissive policy as the default Network Server policy, which allows the attack to work.
Problem types: description: externally-controlled input vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache Derby
Published: 2018-05-07T13:00:00.000Z
CVE-2018-1314 
In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do "EXPLAIN" on arbitrary table or view and expose table metadata and statistics.
Problem types: description: Improper Access Control
Affected products: vendor: Apache Software Foundation
product: Apache Hive
Published: 2018-11-08T14:00:00.000Z
CVE-2018-1315 
In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server can cause the file to be written to an arbitrary location on the cluster where the command is run from. This is because FTP client code in HPL/SQL does not verify the destination location of the downloaded file. This does not affect hive cli user and hiveserver2 user as hplsql is a separate command line script and needs to be invoked differently.
Problem types: description: Resource Injection
Affected products: vendor: Apache Software Foundation
product: Apache Hive
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1316 
The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was addressed in Apache ODE 1.3.3 which was released in 2009, however the incorrect name CVE-2008-2370 was used on the advisory by mistake.
Problem types: description: Directory Traversal
Affected products: vendor: Apache Software Foundation
product: Apache ODE
Published: 2018-03-05T14:00:00.000Z
CVE-2018-1317 
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without authentication.
Problem types: description: Improper Authentication
Affected products: vendor: Apache Software Foundation
product: Apache Zeppelin
Published: 2019-04-23T14:45:20.000Z
CVE-2018-1318 
Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server (ATS) 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2018-08-29T13:00:00.000Z
CVE-2018-1319 
In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results may occur including XSS or service denial for the victim's browsing session.
Problem types: description: HTTP response splitting
Affected products: vendor: Apache Software Foundation
product: Apache Allura
Published: 2018-03-15T20:00:00.000Z
CVE-2018-1320 
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.
Problem types: description: Improper Authentication
Affected products: vendor: Apache Software Foundation
product: Apache Thrift
Published: 2019-01-07T18:00:00.000Z
CVE-2018-1321 
An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, including but not limited to file read, file write, and code execution.
Problem types: description: File read and write, remote code execution
Affected products: vendor: Apache Software Foundation
product: Apache Syncope
Published: 2018-03-20T17:00:00.000Z
CVE-2018-1322 
An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.
Problem types: description: Information disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Syncope
Published: 2018-03-20T17:00:00.000Z
CVE-2018-1323 
The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it to the URI-worker map did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via IIS, then it was possible for a specially constructed request to expose application functionality through the reverse proxy that was not intended for clients accessing Tomcat via the reverse proxy.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat Connectors
Published: 2018-03-12T16:00:00.000Z
CVE-2018-1324 
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Commons Compress
Published: 2018-03-16T13:00:00.000Z
CVE-2018-1325 
In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.
Problem types: description: XSS
Affected products: vendor: Apache Software Foundation
product: wicket-jquery-ui
Published: 2018-04-18T19:00:00.000Z
CVE-2018-1327 
The Apache Struts REST Plugin is using XStream library which is vulnerable and allow perform a DoS attack when using a malicious request with specially crafted XML payload. Upgrade to the Apache Struts version 2.5.16 and switch to an optional Jackson XML handler as described here http://struts.apache.org/plugins/rest/#custom-contenttypehandlers. Another option is to implement a custom XML handler based on the Jackson XML handler from the Apache Struts 2.5.16.
Problem types: description: DoS attack
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2018-03-27T21:00:00.000Z
CVE-2018-1328 
Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. Issue reported by "Josna Joseph".
Problem types: description: Stored XSS
Affected products: vendor: Apache Software Foundation
product: Apache Zeppelin
Published: 2019-04-23T14:45:24.000Z
CVE-2018-1330 
When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP requests with trailers can lead to a libprocess crash too because of the mistakenly planted assertion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Mesos
Published: 2018-09-13T19:00:00.000Z
CVE-2018-1331 
In Apache Storm 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1, an attacker with access to a secure storm cluster in some cases could execute arbitrary code as a different user.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Storm
Published: 2018-07-10T17:00:00.000Z
CVE-2018-1332 
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons.
Problem types: description: User Impersonation
Affected products: vendor: Apache Software Foundation
product: Apache Storm
Published: 2018-06-05T19:00:00.000Z
CVE-2018-1333 DoS for HTTP/2 connections by crafted requests
By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).
Problem types: description: (undefined)
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: The issue was discovered by Craig Young of Tripwire VERT.
Published: 2018-06-18T18:00:00.000Z
CVE-2018-1334 
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Spark
Published: 2018-07-12T13:00:00.000Z
CVE-2018-1335 
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18.
Problem types: description: Command Injection
Affected products: vendor: Apache Software Foundation
product: Apache Tika
Published: 2018-04-25T21:00:00.000Z
CVE-2018-1336 
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2018-08-02T14:00:00.000Z
CVE-2018-1337 
In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS layer has been established, if the connection has already been used and put back in a pool of connections, leading to leaking any information contained in this request (including the credentials when sending a BIND request).
Problem types: description: Plaintext Password Disclosure in Secured Channel
Affected products: vendor: Apache Software Foundation
product: Apache Directory
Published: 2018-07-10T13:00:00.000Z
CVE-2018-1338 
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.
Problem types: description: DoS Vulnerability-- infinite loop
Affected products: vendor: Apache Software Foundation
product: Apache Tika
Published: 2018-04-25T21:00:00.000Z
CVE-2018-1339 
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.
Problem types: description: Denial Of Service Vulnerability -- infinite loop
Affected products: vendor: Apache Software Foundation
product: Apache Tika
Published: 2018-04-25T21:00:00.000Z
CVE-2018-1340 
Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token. This cookie lacked the "secure" flag, which could allow an attacker eavesdropping on the network to intercept the user's session token if unencrypted HTTP requests are made to the same domain.
Problem types: description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Affected products: vendor: Apache Software Foundation
product: Apache Guacamole
Published: 2019-02-07T22:00:00.000Z
CVE-2018-1342 
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console.
Problem types: description: Arbitrary file upload to the Admin Console server
Affected products: vendor: Micro Focus
product: NetIQ Access Manager, Administrative Console
Published: 2018-01-26T02:00:00.000Z
CVE-2018-1343 
PAM exposure enabling unauthenticated access to remote host
Problem types: description: Improper Access - exposure enabling unauthenticated access to remote host.
Affected products: vendor: Micro Focus
product: NetIQ Privileged Account Manager (PAM) 3.1 and 3.2
Published: 2018-03-06T20:00:00.000Z
CVE-2018-1344 NetIQ iManager Communication Downgrade Attack
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1
Problem types: description: communication downgrade
Affected products: vendor: NetIQ
product: iManager
Published: 2018-03-21T14:00:00.000Z
CVE-2018-1345 iManager elevation of privilege
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.
Problem types: description: Elevation of Privilege
Affected products: vendor: NetIQ
product: iManager
Published: 2018-03-21T14:00:00.000Z
CVE-2018-1346 NetIQ eDirectory Denial of Service
Addresses denial of service attack to eDirectory versions prior to 9.1.
Problem types: description: Denial of Service
Affected products: vendor: NetIQ
product: eDirectory
Published: 2018-03-21T14:00:00.000Z