rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-10102 
JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T00:00:00.000Z
CVE-2019-10103 
JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T00:00:00.000Z
CVE-2019-10104 
In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of localhost only. The issue has been fixed in the following versions: 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:52:13.000Z
CVE-2019-10105 
CMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field, which is reachable via a "Create a new Template" action to the Design Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T21:52:22.000Z
CVE-2019-10106 
CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin Settings - News module" section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T21:52:33.000Z
CVE-2019-10107 
CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences -> My Account" section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T21:52:45.000Z
CVE-2019-10108 
An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. It allowed non-members of a private project/group to add and read labels.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T19:06:26.000Z
CVE-2019-10109 
An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. EXIF geolocation data were not removed from images when uploaded to GitLab. As a result, anyone with access to the uploaded image could obtain its geolocation, device, and software version data (if present).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T19:14:55.000Z
CVE-2019-10110 
An Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The "move issue" feature may allow a user to create projects under any namespace on any GitLab instance on which they hold credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T19:23:36.000Z
CVE-2019-10111 
An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. It allows persistent XSS in the merge request "resolve conflicts" page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-15T19:28:49.000Z
CVE-2019-10112 
An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The construction of the HMAC key was insecurely derived.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T15:11:45.000Z
CVE-2019-10113 
An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Making concurrent GET /api/v4/projects/<id>/languages requests may allow Uncontrolled Resource Consumption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T14:27:59.000Z
CVE-2019-10114 
An Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. During the OAuth authentication process, the application attempts to validate a parameter in an insecure way, potentially exposing data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T14:39:43.000Z
CVE-2019-10115 
An Insecure Permissions issue (issue 2 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. The GitLab Releases feature could allow guest users access to private information like release details and code information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T14:46:46.000Z
CVE-2019-10116 
An Insecure Permissions issue (issue 3 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. Guests of a project were allowed to see Related Branches created for an issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T14:55:14.000Z
CVE-2019-10117 
An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. A redirect is triggered after successful authentication within the Oauth/:GeoAuthController for the secondary Geo node.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-16T15:00:18.000Z
CVE-2019-10118 
Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T03:54:11.000Z
CVE-2019-10119 
eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via an invalid login attempt to the RemoteApi account, aka HMCCU-154. This leads to automatic login as admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T11:50:44.000Z
CVE-2019-10120 
On eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16, automatic login configuration (aka setAutoLogin) can be achieved by continuing to use a session ID after a logout, aka HMCCU-154.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T11:47:18.000Z
CVE-2019-10121 
eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via the user authentication dialogue, aka HMCCU-153. This leads to automatic login as admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T11:54:13.000Z
CVE-2019-10122 
eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179. This may lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T11:56:48.000Z
CVE-2019-10123 
SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-31T21:42:37.000Z
CVE-2019-10125 
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T05:15:22.000Z
CVE-2019-10126 
A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: n/a
product: kernel
Published: 2019-06-14T13:56:32.000Z
CVE-2019-10127 
A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, an attacker having both an unprivileged Windows account and an unprivileged PostgreSQL account can cause the PostgreSQL service account to execute arbitrary code. An attacker having only the unprivileged Windows account can read arbitrary data directory files, essentially bypassing database-imposed read access limitations. An attacker having only the unprivileged Windows account can also delete certain data directory files.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: postgresql
Published: 2021-03-19T18:52:27.000Z
CVE-2019-10128 
A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, this allows a local attacker to read arbitrary data directory files, essentially bypassing database-imposed read access limitations. In plausible non-default configurations, an attacker having both an unprivileged Windows account and an unprivileged PostgreSQL account can cause the PostgreSQL service account to execute arbitrary code.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: postgresql
Published: 2021-03-19T19:15:11.000Z
CVE-2019-10129 
A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. In the default configuration, any user can create a partitioned table suitable for this attack. (Exploit prerequisites are the same as for CVE-2018-1052).
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: PostgreSQL Project
product: postgresql
Published: 2019-07-30T16:10:04.000Z
CVE-2019-10130 
A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x up to, excluding 9.5.17. PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit this to read the most common values of certain columns. Affected columns are those for which the attacker has SELECT privilege and for which, in an ordinary query, row-level security prunes the set of rows visible to the attacker.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: PostgreSQL Project
product: postgresql
Published: 2019-07-30T16:13:46.000Z
CVE-2019-10131 
An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.
Problem types: cwe_id: CWE-193
description: CWE-193
Affected products: vendor: ImageMagick
product: ImageMagick
Published: 2019-04-30T18:01:57.000Z
CVE-2019-10132 
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: libvirt
product: libvirt
Published: 2019-05-22T17:21:19.000Z
CVE-2019-10133 
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to internal URLs.
Problem types: cwe_id: CWE-601
description: CWE-601
Affected products: vendor: Moodle
product: moodle
Published: 2019-06-26T18:10:34.000Z
CVE-2019-10134 
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Moodle
product: moodle
Published: 2019-06-26T18:14:38.000Z
CVE-2019-10135 
A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: Red Hat
product: osbs-client
Published: 2019-07-11T00:00:00.000Z
CVE-2019-10136 
It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.
Problem types: cwe_id: CWE-347
description: CWE-347
Affected products: vendor: spacewalkproject
product: spacewalk
Published: 2019-07-02T19:29:42.000Z
CVE-2019-10137 
A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: spacewalkproject
product: spacewalk-proxy
Published: 2019-07-02T19:28:32.000Z
CVE-2019-10138 
A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Red Hat
product: python-novajoin
Published: 2019-07-30T16:16:51.000Z
CVE-2019-10139 
During HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var` which contains the admin and the appliance passwords as plain-text. At the of the deployment procedure, these files are deleted.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: ovirt
product: cockpit-ovirt
Published: 2019-05-17T15:28:59.000Z
CVE-2019-10140 
A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: OpenSource
product: kernel:
Published: 2019-08-15T16:50:55.000Z
CVE-2019-10141 
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint). Because the API is unauthenticated, the flaw could be exploited by an attacker with access to the network on which ironic-inspector is listening. Because of how ironic-inspector uses the query results, it is unlikely that data could be obtained. However, the attacker could pass malicious data and create a denial of service.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: RedHat
product: openstack-ironic-inspector
Published: 2019-07-30T16:22:59.000Z
CVE-2019-10142 
A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this flaw to crash the system, corrupt memory, or create other adverse security affects.
Problem types: cwe_id: CWE-190
description: CWE-190
cwe_id: CWE-119
description: CWE-119
Affected products: vendor: RedHat
product: kernel
Published: 2019-07-30T16:26:31.000Z
CVE-2019-10143 
It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
Problem types: cwe_id: CWE-266
description: CWE-266
cwe_id: CWE-250
description: CWE-250
Affected products: vendor: freeradius
product: freeradius
Published: 2019-05-24T00:00:00.000Z
CVE-2019-10144 
rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` are given all capabilities during stage 2 (the actual environment in which the applications run). Compromised containers could exploit this flaw to access host resources.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: [UNKNOWN]
product: rkt
Published: 2019-06-03T18:19:20.000Z
CVE-2019-10145 
rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` do not have seccomp filtering during stage 2 (the actual environment in which the applications run). Compromised containers could exploit this flaw to access host resources.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: [UNKNOWN]
product: rkt
Published: 2019-06-03T18:20:07.000Z
CVE-2019-10146 
A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: pki-core
Published: 2020-03-18T14:47:30.000Z
CVE-2019-10147 
rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` are not limited by cgroups during stage 2 (the actual environment in which the applications run). Compromised containers could exploit this flaw to access host resources.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: [UNKNOWN]
product: rkt
Published: 2019-06-03T18:21:04.000Z
CVE-2019-10149 
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: exim
product: exim
Published: 2019-06-05T00:00:00.000Z
CVE-2019-10150 
It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authentication during builds. An attacker, with the ability to redirect network traffic, could use this to alter the resulting build output.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: redhat
product: atomic-openshift
Published: 2019-06-12T13:42:36.000Z
CVE-2019-10152 
A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when an administrator tries to copy a file from/to the container.
Problem types: cwe_id: CWE-59
description: CWE-59
cwe_id: CWE-22
description: CWE-22
Affected products: vendor: Podman
product: podman
Published: 2019-07-30T22:07:23.000Z
CVE-2019-10153 
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.
Problem types: cwe_id: CWE-172
description: CWE-172
Affected products: vendor: ClusterLabs
product: fence-agents
Published: 2019-07-30T22:10:35.000Z
CVE-2019-10154 
A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Moodle
product: moodle
Published: 2019-06-26T18:19:47.000Z
CVE-2019-10155 
The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integrity check value was not verified. This issue affects versions before 3.29.
Problem types: cwe_id: CWE-354
description: CWE-354
Affected products: vendor: the libreswan Project
product: libreswan
Published: 2019-06-12T13:51:01.000Z
CVE-2019-10156 
A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: ansible
Published: 2019-07-30T22:12:30.000Z
CVE-2019-10157 
It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from the server in its backchannel logout . An attacker with local access could use this to construct a malicious web token setting an NBF parameter that could prevent user access indefinitely.
Problem types: cwe_id: CWE-345
description: CWE-345
Affected products: vendor: Red Hat
product: keycloak
Published: 2019-06-12T13:48:42.000Z
CVE-2019-10158 
A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.
Problem types: cwe_id: CWE-384
description: CWE-384
Affected products: vendor: Red Hat
product: infinispan
Published: 2020-01-02T14:28:44.000Z
CVE-2019-10159 
cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration log controller. An attacker with access to an unprivileged user can access all VM migration logs available.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Red Hat
product: cfme
Published: 2019-06-14T13:53:19.000Z