rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-12408 
It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow Arrays are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Arrow
Published: 2019-11-08T18:20:16.000Z
CVE-2019-12409 
The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and exposed on RMI_PORT (default=18983), without any authentication. If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache
product: Solr
Published: 2019-11-18T20:50:59.000Z
CVE-2019-12410 
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory could potentially be shared if are transmitted over the wire (for instance with Flight) or persisted in the streaming IPC and file formats.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Arrow
Published: 2019-11-08T18:04:52.000Z
CVE-2019-12412 
A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
Problem types: description: NULL pointer dereference
Affected products: vendor: n/a
product: libapreq2
Published: 2020-11-18T23:16:50.000Z
CVE-2019-12413 
In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by using a specially crafted complex query.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Incubator Superset
Published: 2019-12-16T21:53:26.000Z
CVE-2019-12414 
In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Incubator Superset
Published: 2019-12-16T21:52:57.000Z
CVE-2019-12415 
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache POI
Published: 2019-10-23T19:27:20.000Z
CVE-2019-12416 
we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.
Problem types: description: JavaScript Injection
Affected products: vendor: n/a
product: Apache DeltaSpike
Published: 2020-03-19T14:48:52.000Z
CVE-2019-12417 
A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.
Problem types: description: Stored XSS and Local File Disclosure
Affected products: vendor: n/a
product: Apache Airflow
Published: 2019-10-30T21:04:32.000Z
CVE-2019-12418 
When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the Tomcat instance.
Problem types: description: Local Privilege Escalation
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2019-12-23T17:12:43.000Z
CVE-2019-12419 
Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the supplied clientId parameter in the request. If a malicious client was able to somehow steal an authorization code issued to another client, then they could exploit this vulnerability to obtain an access token for the other client.
Problem types: description: Apache CXF OpenId Connect token service does not properly validate the clientId
Affected products: vendor: Apache
product: Apache CXF
Published: 2019-11-06T20:18:54.000Z
CVE-2019-12420 
In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.
Problem types: description: Denial of Service via excessive resource utilization
Affected products: vendor: Apache
product: Apache SpamAssassin
Published: 2019-12-12T22:16:05.000Z
CVE-2019-12421 
When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out to make API requests to NiFi.
Problem types: description: Authentication
Affected products: vendor: n/a
product: Apache NiFi
Published: 2019-11-19T21:33:12.000Z
CVE-2019-12422 
Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.
Problem types: description: Weak Cookie Vulnerability
Affected products: vendor: Apache
product: Shiro
Published: 2019-11-18T22:04:21.000Z
CVE-2019-12423 
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12) by specifing the path of the keystore and the alias of the keystore entry. This case is not vulnerable. However it is also possible to obtain the keys from a JWK keystore file, by setting the configuration parameter "rs.security.keystore.type" to "jwk". For this case all keys are returned in this file "as is", including all private key and secret key credentials. This is an obvious security risk if the user has configured the signature keystore file with private or secret key credentials. From CXF 3.3.5 and 3.2.12, it is mandatory to specify an alias corresponding to the id of the key in the JWK file, and only this key is returned. In addition, any private key information is omitted by default. "oct" keys, which contain secret keys, are not returned at all.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: CXF
Published: 2020-01-16T17:42:14.000Z
CVE-2019-12425 
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
Problem types: description: CSRF Vulnerability
Affected products: vendor: Apache
product: Apache OFBiz
Published: 2020-04-30T19:20:11.000Z
CVE-2019-12426 
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Apache OFBiz
Published: 2020-02-06T16:47:14.000Z
CVE-2019-12427 
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T18:21:57.000Z
CVE-2019-12428 
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T13:08:16.000Z
CVE-2019-12429 
An issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11. Unprivileged users were able to access labels, status and merge request counts of confidential issues via the milestone details page. It has Improper Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T13:10:16.000Z
CVE-2019-12430 
An issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted payload would allow an authenticated malicious user to execute commands remotely through the repository download feature. It allows Command Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T13:40:00.000Z
CVE-2019-12431 
An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Restricted users could access the metadata of private milestones through the Search API. It has Improper Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T13:41:50.000Z
CVE-2019-12432 
An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Non-member users who subscribed to issue notifications could access the title of confidential issues through the unsubscription page. It allows Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T13:43:24.000Z
CVE-2019-12433 
An issue was discovered in GitLab Community and Enterprise Edition 11.7 through 11.11. It has Improper Input Validation. Restricted visibility settings allow creating internal projects in private groups, leading to multiple permission issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T13:45:50.000Z
CVE-2019-12434 
An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T13:48:07.000Z
CVE-2019-12435 
Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T11:56:01.000Z
CVE-2019-12436 
Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T12:00:33.000Z
CVE-2019-12437 
In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-19T16:28:06.000Z
CVE-2019-12439 
bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T14:42:08.000Z
CVE-2019-12440 
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T15:03:57.000Z
CVE-2019-12441 
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. The protected branches feature contained a access control issue which resulted in a bypass of the protected branches restriction rules. It has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T14:36:45.000Z
CVE-2019-12442 
An issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page contained a lack of input validation and output encoding issue which resulted in a persistent XSS vulnerability on child epics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T14:38:37.000Z
CVE-2019-12443 
An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF) vulnerabilities caused by an insufficient validation to prevent DNS rebinding attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T14:41:01.000Z
CVE-2019-12444 
An issue was discovered in GitLab Community and Enterprise Edition 8.9 through 11.11. Wiki Pages contained a lack of input validation which resulted in a persistent XSS vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T14:42:32.000Z
CVE-2019-12445 
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T14:45:16.000Z
CVE-2019-12446 
An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T14:47:10.000Z
CVE-2019-12447 
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T16:15:29.000Z
CVE-2019-12448 
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T16:15:57.000Z
CVE-2019-12449 
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T16:16:06.000Z
CVE-2019-12450 
file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T16:16:14.000Z
CVE-2019-12452 
types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control (which is contrary to the API documentation), allows remote authenticated users to discover password hashes by reading the Basic HTTP Authentication or Digest HTTP Authentication section, or discover a key by reading the ClientTLS section. These can be found in the JSON response to a /api request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-29T18:43:05.000Z
CVE-2019-12453 
In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-19T16:53:47.000Z
CVE-2019-12454 
An issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdup_nul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability because switching to kmemdup_nul() would only fix a security issue if the source string wasn't NUL-terminated, which is not the case
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T03:04:34.000Z
CVE-2019-12455 
An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of derived_name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This id is disputed as not being an issue because “The memory allocation that was not checked is part of a code that only runs at boot time, before user processes are started. Therefore, there is no possibility for an unprivileged user to control it, and no denial of service.”
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T03:04:52.000Z
CVE-2019-12456 
An issue was discovered in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c in the Linux kernel through 5.1.5. It allows local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a "double fetch" vulnerability. NOTE: a third party reports that this is unexploitable because the doubly fetched value is not used
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T11:38:24.000Z
CVE-2019-12457 
FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T12:30:24.000Z
CVE-2019-12458 
FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T12:30:36.000Z
CVE-2019-12459 
FileRun 2019.05.21 allows customizables/plugins/audio_player Directory Listing. This issue has been fixed in FileRun 2019.06.01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T12:30:46.000Z
CVE-2019-12460 
Web Port 1.19.1 allows XSS via the /access/setup type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T12:30:58.000Z
CVE-2019-12461 
Web Port 1.19.1 allows XSS via the /log type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-30T12:31:08.000Z
CVE-2019-12463 
An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqli_real_escape_string, which is only useful for preventing SQL injection attacks; other parameters are unfiltered. This allows an attacker to inject RRDtool syntax with newline characters via the html/graph.php and html/graph-realtime.php scripts. RRDtool syntax is quite versatile and an attacker could leverage this to perform a number of attacks, including disclosing directory structure and filenames, disclosing file content, denial of service, or writing arbitrary files. NOTE: relative to CVE-2019-10665, this requires authentication and the pathnames differ.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T13:02:52.000Z
CVE-2019-12464 
An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /pdf.php file with a partial filename in the report parameter, to cause local file inclusion resulting in code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T13:04:19.000Z
CVE-2019-12465 
An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajax_rulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajax_rulesuggest.php?debug=1&term= request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T13:05:55.000Z
CVE-2019-12466 
Wikimedia MediaWiki through 1.32.1 allows CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:31:50.000Z
CVE-2019-12467 
MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T14:45:01.000Z
CVE-2019-12468 
An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T14:58:15.000Z
CVE-2019-12469 
MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:01:53.000Z
CVE-2019-12470 
Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:04:55.000Z
CVE-2019-12471 
Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:49:21.000Z
CVE-2019-12472 
An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:55:03.000Z
CVE-2019-12473 
Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:43:45.000Z