rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-10160 
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.
Problem types: cwe_id: CWE-172
description: CWE-172
Affected products: vendor: Python
product: python
Published: 2019-06-07T17:50:33.000Z
CVE-2019-10161 
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Libvirt
product: libvirt
Published: 2019-07-30T22:14:10.000Z
CVE-2019-10162 
A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while looking up the NS/A/AAAA records it is about to use for an outgoing notify.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: PowerDNS
product: pdns
Published: 2019-07-30T22:15:35.000Z
CVE-2019-10163 
A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: PowerDNS
product: pdns
Published: 2019-07-30T22:16:59.000Z
CVE-2019-10164 
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: PostgreSQL
product: PostgreSQL
Published: 2019-06-26T15:29:13.000Z
CVE-2019-10165 
OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: Red Hat
product: openshift
Published: 2019-07-30T22:18:05.000Z
CVE-2019-10166 
It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: libvirt
product: libvirt
Published: 2019-08-02T12:02:59.000Z
CVE-2019-10167 
The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
Problem types: cwe_id: CWE-284
description: CWE-284
cwe_id: CWE-250
description: CWE-250
Affected products: vendor: libvirt
product: libvirt
Published: 2019-08-02T12:05:52.000Z
CVE-2019-10168 
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
Problem types: cwe_id: CWE-284
description: CWE-284
cwe_id: CWE-250
description: CWE-250
Affected products: vendor: libvirt
product: libvirt
Published: 2019-08-02T12:08:14.000Z
CVE-2019-10169 
A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running application.
Problem types: cwe_id: CWE-267
description: CWE-267
Affected products: vendor: [UNKNOWN]
product: keycloak
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-05-08T13:47:00.000Z
CVE-2019-10170 
A flaw was found in the Keycloak admin console, where the realm management interface permits a script to be set via the policy. This flaw allows an attacker with authenticated user and realm management permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the application user.
Problem types: cwe_id: CWE-267
description: CWE-267
Affected products: vendor: [UNKNOWN]
product: keycloak
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-05-08T13:47:37.000Z
CVE-2019-10171 
It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: RedHat
product: 389-ds-base
Published: 2019-08-02T13:49:35.000Z
CVE-2019-10172 
A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.
Problem types: cwe_id: CWE-611
description: CWE-611
Affected products: vendor: Redhat
product: jackson-mapper-asl
Published: 2019-11-18T16:16:02.000Z
CVE-2019-10173 
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)
Problem types: cwe_id: CWE-94
description: CWE-94
Affected products: vendor: xstream
product: xstream
Published: 2019-07-23T12:50:44.000Z
CVE-2019-10174 
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce new, malicious behavior into the application.
Problem types: cwe_id: CWE-470
description: CWE-470
Affected products: vendor: [UNKNOWN]
product: infinispan
Published: 2019-11-25T10:26:16.000Z
CVE-2019-10175 
A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the requesting user has permission to access the Persistent Volume Claim (PVC) in the source namespace. This could allow users to clone any PVC in the cluster into their own namespace, effectively allowing access to other user's data.
Problem types: cwe_id: CWE-284
description: CWE-284
cwe_id: CWE-200
description: CWE-200
Affected products: vendor: KubeVirt
product: containerized-data-importer
Published: 2019-06-28T19:55:40.000Z
CVE-2019-10176 
A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the value of this token would be able to re-use the token to perform a CSRF attack.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: RedHat
product: atomic-openshift
Published: 2019-08-02T13:51:09.000Z
CVE-2019-10177 
A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is not properly sanitized. An attacker with least privilege to edit compute is able to execute a XSS attack against other users, which could lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: CloudForms
Published: 2019-06-27T20:50:45.000Z
CVE-2019-10178 
It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from the "Activity" page, enabling a Stored Cross Site Scripting (XSS) vulnerability. An unauthenticated attacker could trick an authenticated victim into creating a specially crafted activity, which would execute arbitrary JavaScript code when viewed in a browser. All versions of pki-core are believed to be vulnerable.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: The pki-core Project
product: pki-core
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
version: 3.1
Published: 2020-03-18T14:57:08.000Z
CVE-2019-10179 
A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: [UNKNOWN]
product: pki-core/pki-kra
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
version: 3.1
Published: 2020-03-20T13:57:04.000Z
CVE-2019-10180 
A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: [UNKNOWN]
product: pki-core
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 2.4
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N
version: 3.1
Published: 2020-03-31T16:31:52.000Z
CVE-2019-10181 
It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw to inject code in a trusted JAR. The code would be executed inside the sandbox.
Problem types: cwe_id: CWE-345
description: CWE-345
Affected products: vendor: IcedTea
product: icedtea-web
Published: 2019-07-31T21:56:11.000Z
CVE-2019-10182 
It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user.
Problem types: cwe_id: CWE-22
description: CWE-22
cwe_id: CWE-94
description: CWE-94
Affected products: vendor: IcedTea
product: icedtea-web
Published: 2019-07-31T21:52:39.000Z
CVE-2019-10183 
Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments, thus leaking them to others users on the system via process listing. It was introduced recently in the virt-manager v2.2.0 release.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: virt-install
Published: 2019-07-03T13:36:47.000Z
CVE-2019-10184 
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: undertow-io
product: undertow
Published: 2019-07-25T20:35:16.000Z
CVE-2019-10185 
It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: IcedTea
product: icedtea-web
Published: 2019-07-31T21:50:57.000Z
CVE-2019-10186 
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey (CSRF) token was not being utilised by the XML loading/unloading admin tool.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: The Moodle Project
product: moodle
Published: 2019-07-31T21:40:55.000Z
CVE-2019-10187 
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: The Moodle Project
product: moodle
Published: 2019-07-31T21:39:40.000Z
CVE-2019-10188 
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in a quiz group could modify group overrides for other groups in the same quiz.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: The Moodle Project
product: moodle
Published: 2019-07-31T21:29:44.000Z
CVE-2019-10189 
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: The Moodle Project
product: moodle
Published: 2019-07-31T21:27:36.000Z
CVE-2019-10190 
A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of sending a SERVFAIL packet. Caching is not affected by this particular bug but see CVE-2019-10191.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: CZ.NIC
product: knot-resolver
Published: 2019-07-16T17:50:05.000Z
CVE-2019-10191 
A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: CZ.NIC
product: knot-resolver
Published: 2019-07-16T17:52:43.000Z
CVE-2019-10192 
A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: Redis Labs
product: redis
Published: 2019-07-11T18:30:33.000Z
CVE-2019-10193 
A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: Redis Labs
product: redis
Published: 2019-07-11T18:30:33.000Z
CVE-2019-10194 
Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: Red Hat
product: ovirt-engine-metrics
Published: 2019-07-11T18:33:06.000Z
CVE-2019-10195 
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on FreeIPA masters. Batch processing of commands with passwords as arguments or options is not performed by default in FreeIPA but is possible by third-party components. An attacker having access to system logs on FreeIPA masters could use this flaw to produce log file content with passwords exposed.
Problem types: cwe_id: CWE-532
description: CWE-532
cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: IPA
Published: 2019-11-27T07:55:13.000Z
CVE-2019-10196 
A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an uninitialized memory leak in setups where an attacker could submit typed input to the auth parameter.
Problem types: cwe_id: CWE-665
description: CWE-665
Affected products: vendor: n/a
product: nodejs-http-proxy-agent
Published: 2021-03-19T19:22:17.000Z
CVE-2019-10197 
A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: SAMBA
product: samba
Published: 2019-09-03T14:50:27.000Z
CVE-2019-10198 
An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously, commit tasks were searched through find_resource, which performed authorization checks. After the change to Foreman, an unauthenticated user can view the details of a task through the web UI or API, if they can discover or guess the UUID of the task.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: The Foreman Project
product: foreman-tasks
Published: 2019-07-31T21:44:19.000Z
CVE-2019-10199 
It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. An attacker could use this flaw to trick an authenticated user into performing operations via request from an untrusted domain.
Problem types: cwe_id: CWE-352
description: CWE-352
Affected products: vendor: Red Hat
product: keycloak
Published: 2019-08-14T16:07:31.000Z
CVE-2019-10200 
A flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to create pods also have the ability to schedule workloads on master nodes. Pods with permission to access the host network, running on master nodes, can retrieve security credentials for the master AWS IAM role, allowing management access to AWS resources. With access to the security credentials, the user then has access to the entire infrastructure. Impact to data and system availability is high.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: OpenShift Container Platform
Published: 2021-03-19T20:28:36.000Z
CVE-2019-10201 
It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: Red Hat
product: keycloak
Published: 2019-08-14T16:09:39.000Z
CVE-2019-10202 
A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackson-databind by implementing a whitelist approach that will mitigate these vulnerabilities and future ones alike.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: RedHat
product: codehaus
Published: 2019-10-01T14:22:30.000Z
CVE-2019-10203 
PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.
Problem types: cwe_id: CWE-681
description: CWE-681
Affected products: vendor: Red Hat
product: pdns
Published: 2019-11-22T12:01:13.000Z
CVE-2019-10205 
A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: RED HAT
product: quay
Published: 2020-01-02T16:31:53.000Z
CVE-2019-10206 
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: Red Hat
product: Ansible
Published: 2019-11-22T00:00:00.000Z