rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-0188 
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.
Problem types: description: XML external entity injection (XXE)
Affected products: vendor: Apache
product: Apache Camel
Published: 2019-05-28T18:10:08.000Z
CVE-2019-0189 
The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" URL, and uses Java deserialization to perform code execution. In the HttpEngine, the value of the request parameter "serviceContext" is passed to the "deserialize" method of "XmlSerializer". Apache Ofbiz is affected via two different dependencies: "commons-beanutils" and an out-dated version of "commons-fileupload" Mitigation: Upgrade to 16.11.06 or manually apply the commits from OFBIZ-10770 and OFBIZ-10837 on branch 16
Problem types: description: remote code execution
Affected products: vendor: Apache
product: OFBiz
Published: 2019-09-11T20:29:24.000Z
CVE-2019-0190 
A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.
Problem types: description: remote DoS
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2019-01-30T22:00:00.000Z
CVE-2019-0191 
Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validation on the paths in the zip file. This means that a malicious user could craft a .kar file with ".." directory names and break out of the directories to write arbitrary content to the filesystem. This is the "Zip-slip" vulnerability - https://snyk.io/research/zip-slip-vulnerability. This vulnerability is low if the Karaf process user has limited permission on the filesystem. Any Apache Karaf releases prior 4.2.3 is impacted.
Problem types: description: Zip-slip vulnerability in KAR deployer
Affected products: vendor: Apache
product: Apache Karaf
Published: 2019-03-20T17:05:18.000Z
CVE-2019-0192 
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.
Problem types: description: Deserialization of Untrusted Data
Affected products: vendor: Apache Software Foundation
product: Apache Solr
Published: 2019-03-07T21:00:00.000Z
CVE-2019-0193 
In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Apache Solr
Published: 2019-08-01T13:48:40.000Z
CVE-2019-0194 
Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.
Problem types: description: Directory Traversal
Affected products: vendor: Apache
product: Apache Camel
Published: 2019-04-30T21:30:42.000Z
CVE-2019-0195 
Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. If the attacker found the file with the value of the tapestry.hmac-passphrase configuration symbol, most probably the webapp's AppModule class, the value of this symbol could be used to craft a Java deserialization attack, thus running malicious injected Java code. The vector would be the t:formdata parameter from the Form component.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Tapestry
Published: 2019-09-16T15:37:37.000Z
CVE-2019-0196 
A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.
Problem types: description: mod_http2, read-after-free on a string compare
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2019-06-11T21:02:48.000Z
CVE-2019-0197 
A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set "H2Upgrade on" are unaffected by this issue.
Problem types: description: mod_http2, possible crash on late upgrade
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2019-06-11T21:35:52.000Z
CVE-2019-0199 
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet API's blocking I/O, clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS.
Problem types: description: DoS
Affected products: vendor: n/a
product: Apache Tomcat
Published: 2019-04-10T14:21:50.000Z
CVE-2019-0200 
A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which allows an unauthenticated attacker to crash the broker instance by sending specially crafted commands using AMQP protocol versions below 1.0 (AMQP 0-8, 0-9, 0-91 and 0-10). Users of Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 utilizing AMQP protocols 0-8, 0-9, 0-91, 0-10 must upgrade to Qpid Broker-J versions 7.0.7 or 7.1.1 or later.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Qpid Broker-J
Published: 2019-03-06T18:00:00.000Z
CVE-2019-0201 
An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache ZooKeeper
Published: 2019-05-23T13:42:47.000Z
CVE-2019-0202 
The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be accessible via these endpoints.
Problem types: cwe_id: CWE-200
description: CWE-200: Information Exposure
Affected products: vendor: Apache
product: Storm
Published: 2019-07-25T23:17:23.000Z
CVE-2019-0203 
In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to disruption for users of the server.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Apache Subversion
Published: 2019-09-26T15:59:02.000Z
CVE-2019-0204 
A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain root-level code execution on the host.
Problem types: description: Other
Affected products: vendor: Apache
product: Apache Mesos
Published: 2019-03-25T21:43:04.000Z
CVE-2019-0205 
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.
Problem types: description: Potential DoS when processing untrusted Thrift payloads
Affected products: vendor: Apache
product: Apache Thrift
Published: 2019-10-28T22:32:27.000Z
CVE-2019-0207 
Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn't filter the character `\`, so attacker can perform a path traversal attack to read any files on Windows platform.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Apache Tapestry
Published: 2019-09-16T16:36:14.000Z
CVE-2019-0210 
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.
Problem types: description: Out-of-bounds read vulnerability
Affected products: vendor: Apache
product: Apache Thrift
Published: 2019-10-28T22:22:38.000Z
CVE-2019-0211 
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.
Problem types: description: Apache HTTP Server privilege escalation from modules' scripts
Affected products: vendor: Apache
product: Apache HTTP Server
Published: 2019-04-08T21:31:09.000Z
CVE-2019-0212 
In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions of the end-user. This issue is only relevant when HBase is configured with Kerberos authentication, HBase authorization is enabled, and the REST server is configured with SPNEGO authentication. This issue does not extend beyond the HBase REST server.
Problem types: description: Missing Authorization
Affected products: vendor: Apache
product: Apache HBase
Published: 2019-03-28T21:24:07.000Z
CVE-2019-0213 
In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.
Problem types: description: Stored XSS
Affected products: vendor: Apache
product: Apache Archiva
Published: 2019-04-30T21:35:47.000Z
CVE-2019-0214 
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.
Problem types: description: Arbitrary write/delete of files on the archiva server
Affected products: vendor: Apache
product: Apache Archiva
Published: 2019-04-30T21:48:54.000Z
CVE-2019-0215 
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions.
Problem types: description: Access Control Bypass
Affected products: vendor: Apache
product: Apache HTTP Server
Published: 2019-04-08T19:25:45.000Z
CVE-2019-0216 
A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views.
Problem types: description: Stored XSS
Affected products: vendor: n/a
product: Apache Airflow
Published: 2019-04-10T19:52:12.000Z
CVE-2019-0217 
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.
Problem types: description: Access Control Bypass
Affected products: vendor: Apache
product: Apache HTTP Server
Published: 2019-04-08T20:11:20.000Z
CVE-2019-0218 
A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.
Problem types: description: Reflected XSS
Affected products: vendor: The Apache Software Foundation
product: Apache Pony Mail (incubating)
Published: 2019-04-22T21:16:56.000Z
CVE-2019-0219 
A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Cordova
Published: 2020-01-14T14:18:22.000Z
CVE-2019-0220 
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.
Problem types: description: URL normalization inconsistencies
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2019-06-11T20:49:50.000Z
CVE-2019-0221 
The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.
Problem types: description: Cross-Site Scripting
Affected products: vendor: Apache
product: Apache Tomcat
Published: 2019-05-28T21:01:28.000Z
CVE-2019-0222 
In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Apache ActiveMQ
Published: 2019-03-28T21:16:12.000Z
CVE-2019-0223 
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
Problem types: description: Man-in-the-middle Attack
Affected products: vendor: Apache Software Foundation
product: Apache Qpid Proton
Published: 2019-04-23T15:57:07.000Z
CVE-2019-0224 
In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.
Problem types: description: Cross-site scripting vulnerability
Affected products: vendor: Apache
product: Apache JSPWiki
Published: 2019-03-28T21:00:53.000Z
CVE-2019-0225 
A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.
Problem types: description: Local File Inclusion (limited ROOT folder) vulnerability leads to user information disclosure
Affected products: vendor: Apache
product: Apache JSPWiki
Published: 2019-03-28T21:07:57.000Z
CVE-2019-0226 
Apache Karaf Config service provides a install method (via service or MBean) that could be used to travel in any directory and overwrite existing file. The vulnerability is low if the Karaf process user has limited permission on the filesystem. Any Apache Karaf version before 4.2.5 is impacted. User should upgrade to Apache Karaf 4.2.5 or later.
Problem types: description: Filesystem access
Affected products: vendor: Apache
product: Karaf
Published: 2019-05-09T13:31:47.000Z
CVE-2019-0227 
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.
Problem types: description: SSRF
Affected products: vendor: Apache
product: Apache Axis 1.4
Published: 2019-05-01T20:03:49.000Z
CVE-2019-0228 
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.
Problem types: description: XML External Entity (XXE) attacks
Affected products: vendor: n/a
product: Apache PDFBox
Published: 2019-04-17T14:07:34.000Z
CVE-2019-0229 
A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery attacks.
Problem types: description: CSRF
Affected products: vendor: n/a
product: Apache Airflow
Published: 2019-04-10T19:51:13.000Z
CVE-2019-0230 
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Apache Struts
Published: 2020-09-14T16:41:27.000Z
CVE-2019-0231 Apache MINA SSLFilter security Issue
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.
Problem types: description: SSLFilter security Issue
Affected products: vendor: Apache Software Foundation
product: Apache MINA
Credits: lang: en
value: This issue was discovered and reported by Oleksii Osypov.
Published: 2019-10-01T19:39:53.189Z
CVE-2019-0232 
When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/).
Problem types: description: Remote Code Execution
Affected products: vendor: Apache
product: Tomcat
Published: 2019-04-15T14:23:52.000Z
CVE-2019-0233 
An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Apache Struts
Published: 2020-09-14T16:50:11.000Z
CVE-2019-0234 
A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross Site Scripting (XSS). The mitigation for this vulnerability is to upgrade to the latest version of Roller, which is now Roller 5.2.3.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Apache Roller
Published: 2019-07-15T21:13:14.000Z
CVE-2019-0235 
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.
Problem types: description: CSRF Vulnerability
Affected products: vendor: Apache
product: Apache OFBiz
Published: 2020-04-30T19:22:20.000Z
CVE-2019-0238 
SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP Commerce (ex. SAP Hybris Commerce)
Published: 2019-01-08T20:00:00.000Z
CVE-2019-0240 
SAP Business Objects Mobile for Android (before 6.3.5) application allows an attacker to provide malicious input in the form of a SAP BI link, preventing legitimate users from accessing the application by crashing it.
Problem types: description: Denial of Service
Affected products: vendor: SAP SE
product: SAP Business Objects Mobile for Android
Published: 2019-01-08T20:00:00.000Z
CVE-2019-0241 
SAP Work and Inventory Manager (Agentry_SDK , before 7.0, 7.1) allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Problem types: description: Denial of Service
Affected products: vendor: SAP SE
product: SAP Work and Inventory Manager (Agentry_SDK)
Published: 2019-01-08T20:00:00.000Z
CVE-2019-0243 
Under some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 (SP08)) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: description: Missing Authorization Check
Affected products: vendor: SAP SE
product: SAP BW/4HANA (DW4CORE)
Published: 2019-01-08T20:00:00.000Z
CVE-2019-0244 
SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP CRM WebClient UI (SAPSCORE)
vendor: SAP SE
product: SAP CRM WebClient UI (S4FND)
vendor: SAP SE
product: SAP CRM WebClient UI (WEBCUIF)
Published: 2019-01-08T20:00:00.000Z
CVE-2019-0245 
SAP CRM WebClient UI (fixed in SAPSCORE 1.12; S4FND 1.02; WEBCUIF 7.31, 7.46, 7.47, 7.48, 8.0, 8.01) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP CRM WebClient UI (SAPSCORE)
vendor: SAP SE
product: SAP CRM WebClient UI (S4FND)
vendor: SAP SE
product: SAP CRM WebClient UI (WEBCUIF)
Published: 2019-01-08T20:00:00.000Z
CVE-2019-0246 
SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity.
Problem types: description: Missing Authentication
Affected products: vendor: SAP SE
product: SAP Cloud Connector
Published: 2019-01-08T20:00:00.000Z