rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-10047 
A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file preview features of the application. An authenticated attacker can upload an HTML file containing JavaScript code and afterwards a file preview URL can be used to access the uploaded file. If a malicious user shares an uploaded HTML file containing JavaScript code with another user of the application, and tricks an authenticated victim into accessing a URL that results in the HTML code being interpreted by the web browser, then the included JavaScript code is executed under the context of the victim user session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-31T21:13:11.000Z
CVE-2019-10048 
The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation and sanitization of user supplied input in the plugin's configuration options, allowing arbitrary shell commands to be entered that result in command execution on the underlying operating system, with the privileges of the local user running the web server. The attacker must be authenticated into the application with an administrator user account in order to be able to edit the affected plugin configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-31T21:15:49.000Z
CVE-2019-10049 
It is possible for an attacker with regular user access to the web application of Pydio through 8.2.2 to trick an administrator user into opening a link shared through the application, that in turn opens a shared file that contains JavaScript code (that is executed in the context of the victim user to obtain sensitive information such as session identifiers and perform actions on behalf of him/her).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-31T21:17:46.000Z
CVE-2019-10050 
A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function DecodeMPLS is composed only of a packet of source address and destination address plus the correct type field and the right number for shim, an attacker can manipulate the control flow, such that the condition to leave the loop is true. After leaving the loop, the network packet has a length of 2 bytes. There is no validation of this length. Later on, the code tries to read at an empty position, leading to a crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T16:18:52.000Z
CVE-2019-10051 
An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, then the program enters an smb/files.rs error condition and crashes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T19:47:16.000Z
CVE-2019-10052 
An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust environment runs into a panic in parse_clientid_option in the dhcp/parser.rs file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T19:52:13.000Z
CVE-2019-10053 
An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of a \n character, then the program runs into a heap-based buffer over-read. This occurs because the erroneous search for \r results in an integer underflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T20:12:30.000Z
CVE-2019-10054 
An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invalid memory access and the program crashes within the nfs/nfs3.rs file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T20:09:13.000Z
CVE-2019-10055 
An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within the ftp/mod.rs file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T20:13:14.000Z
CVE-2019-10056 
An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn't determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T20:17:17.000Z
CVE-2019-10057 
Various Lexmark products have CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T21:32:39.000Z
CVE-2019-10058 
Various Lexmark products have Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T15:59:30.000Z
CVE-2019-10059 
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T21:28:37.000Z
CVE-2019-10060 
The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-25T23:54:09.000Z
CVE-2019-10061 
utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T00:07:20.000Z
CVE-2019-10062 
The HTMLSanitizer class in html-sanitizer.ts in all released versions of the Aurelia framework 1.x repository is vulnerable to XSS. The sanitizer only attempts to filter SCRIPT elements, which makes it feasible for remote attackers to conduct XSS attacks via (for example) JavaScript code in an attribute of various other elements. An attacker might also exploit a bug in how the SCRIPT string is processed by splitting and nesting them for example.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-13T20:27:29.000Z
CVE-2019-10063 
Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T13:40:19.000Z
CVE-2019-10064 
hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-28T14:07:14.000Z
CVE-2019-10065 
An issue was discovered in Open Ticket Request System (OTRS) 7.0 through 7.0.6. An attacker who is logged into OTRS as a customer user can use the search result screens to disclose information from internal FAQ articles, a different vulnerability than CVE-2019-9753.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T12:41:10.000Z
CVE-2019-10066 
An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x through 5.0.12. An attacker who is logged into OTRS as an agent with appropriate permissions may create a carefully crafted calendar appointment in order to cause execution of JavaScript in the context of OTRS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-21T23:23:15.000Z
CVE-2019-10067 
An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17. An attacker who is logged into OTRS as an agent user with appropriate permissions may manipulate the URL to cause execution of JavaScript in the context of OTRS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-21T23:09:13.000Z
CVE-2019-10068 
An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-26T17:43:23.000Z
CVE-2019-10069 
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-31T21:36:11.000Z
CVE-2019-10070 
Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality
Problem types: description: Stored XSS Vulnerability
Affected products: vendor: Apache
product: Atlas
Published: 2019-11-18T20:05:31.000Z
CVE-2019-10071 
The code which checks HMAC in form submissions used String.equals() for comparisons, which results in a timing side channel for the comparison of the HMAC signatures. This could lead to remote code execution if an attacker is able to determine the correct signature for their payload. The comparison should be done with a constant time algorithm instead.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Apache Tapestry
Published: 2019-09-16T17:46:19.000Z
CVE-2019-10072 
The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5.0 to 8.5.40 . By not sending WINDOW_UPDATE messages for the connection window (stream 0) clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Apache Tomcat
Published: 2019-06-21T17:56:42.000Z
CVE-2019-10073 
The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616
Problem types: description: XSS vulnerability
Affected products: vendor: Apache
product: OFBiz
Published: 2019-09-11T20:34:02.000Z
CVE-2019-10074 
An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field. This was the case for the Customer Request "story" input in the Order Manager application. Encoding should not be disabled without good reason and never within a field that accepts user input. Mitigation: Upgrade to 16.11.06 or manually apply the following commit on branch 16.11: r1858533
Problem types: description: RCE
Affected products: vendor: Apache
product: OFBiz
Published: 2019-09-11T20:38:56.000Z
CVE-2019-10076 
A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
Problem types: description: Cross-site scripting vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache JSPWiki
Published: 2019-05-20T20:31:41.000Z
CVE-2019-10077 
A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
Problem types: description: Cross-site scripting vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache JSPWiki
Published: 2019-05-20T20:46:15.000Z
CVE-2019-10078 
A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable.
Problem types: description: Cross-site scripting vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache JSPWiki
Published: 2019-05-20T20:50:54.000Z
CVE-2019-10079 
Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache Traffic Server didn't limit the number of setting frames sent from the client using the HTTP/2 protocol. Users should upgrade to Apache Traffic Server 7.1.7, 8.0.4, or later versions.
Problem types: description: DOS Attack
Affected products: vendor: n/a
product: Apache Traffic Server
Published: 2019-10-22T15:42:35.000Z
CVE-2019-10080 
The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE) and reveal information such as the versions of Java, Jersey, and Apache that the NiFI instance uses.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache NiFi
Published: 2019-11-19T21:32:11.000Z
CVE-2019-10081 
HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client.
Problem types: description: mod_http2, memory corruption on early pushes
Affected products: vendor: n/a
product: Apache HTTP Server
Published: 2019-08-15T21:02:49.000Z
CVE-2019-10082 
In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.
Problem types: description: mod_http2, write beyond array on h2 push
Affected products: vendor: n/a
product: Apache HTTP Server
Published: 2019-09-26T14:40:39.000Z
CVE-2019-10083 
When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at the top most level, not recursively). The response included details about processors and controller services which the user may not have had read access to.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache NiFi
Published: 2019-11-19T21:34:11.000Z
CVE-2019-10084 
In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can interact with those sessions or queries via a specially-constructed request and thereby potentially bypass authorization and audit mechanisms. Session and query IDs are unique and random, but have not been documented or consistently treated as sensitive secrets. Therefore they may be exposed in logs or interfaces. They were also not generated with a cryptographically secure random number generator, so are vulnerable to random number generator attacks that predict future IDs based on past IDs. Impala deployments with Apache Sentry or Apache Ranger authorization enabled may be vulnerable to privilege escalation if an authenticated attacker is able to hijack a session or query from another authenticated user with privileges not assigned to the attacker. Impala deployments with audit logging enabled may be vulnerable to incorrect audit logging as a user could undertake actions that were logged under the name of a different authenticated user. Constructing an attack requires a high degree of technical sophistication and access to the Impala system as an authenticated user.
Problem types: description: Privilege Escalation
Affected products: vendor: Apache Software Foundation
product: Impala
Published: 2019-11-05T19:30:14.000Z
CVE-2019-10085 
In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page.
Problem types: description: XSS Vulnerability
Affected products: vendor: n/a
product: Apache Allura
Published: 2019-06-18T23:07:22.000Z
CVE-2019-10086 
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Problem types: description: Information Disclosure
Affected products: vendor: Apache
product: Apache Commons Beanutils
Published: 2019-08-20T20:10:15.000Z
CVE-2019-10087 
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache JSPWiki
Published: 2019-09-23T14:47:13.000Z
CVE-2019-10088 
A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later.
Problem types: description: DoS/OOM
Affected products: vendor: Apache
product: Apache Tika
Published: 2019-08-02T18:53:19.000Z
CVE-2019-10089 
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache JSPWiki
Published: 2019-09-23T14:51:02.000Z
CVE-2019-10090 
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache JSPWiki
Published: 2019-09-23T15:26:14.000Z
CVE-2019-10091 
When TLS is enabled with ssl-endpoint-identification-enabled set to true, Apache Geode fails to perform hostname verification of the entries in the certificate SAN during the SSL handshake. This could compromise intra-cluster communication using a man-in-the-middle attack.
Problem types: description: Improper Certificate Validation
Affected products: vendor: n/a
product: Apache Geode
Published: 2020-03-16T13:05:51.000Z
CVE-2019-10092 
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.
Problem types: description: Limited cross-site scriptingcross-site scripting in mod_proxy
Affected products: vendor: n/a
product: Apache HTTP Server
Published: 2019-09-26T14:07:46.000Z
CVE-2019-10093 
In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later.
Problem types: description: DoS
Affected products: vendor: Apache
product: Apache Tika
Published: 2019-08-02T18:32:41.000Z
CVE-2019-10094 
A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later.
Problem types: description: DoS
Affected products: vendor: Apache
product: Apache Tika
Published: 2019-08-02T18:37:52.000Z
CVE-2019-10095 bash command injection in spark interpreter
bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
Problem types: description: bash command injection
Affected products: vendor: Apache Software Foundation
product: Apache Zeppelin
Credits: lang: en
value: Apache Zeppelin would like to thank HERE Security team for reporting this issue
Published: 2021-09-02T00:00:00.000Z
CVE-2019-10097 
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.
Problem types: description: Stack buffer overflow and NULL pointer dereference
Affected products: vendor: n/a
product: Apache HTTP Server
Published: 2019-09-26T14:21:24.000Z
CVE-2019-10098 
In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.
Problem types: cwe_id: CWE-601
description: mod_rewrite CWE-601 open redirect
Affected products: vendor: n/a
product: Apache HTTP Server
Published: 2019-09-25T16:39:23.000Z
CVE-2019-10099 
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (controlled by spark.maxRemoteBlockSizeFetchToMem); in SparkR, using parallelize; in Pyspark, using broadcast and parallelize; and use of python udfs.
Problem types: description: Unencrypted data
Affected products: vendor: Apache
product: Apache Spark
Published: 2019-08-07T16:18:46.000Z
CVE-2019-10100 
In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to execute code remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T18:15:32.000Z
CVE-2019-10101 
JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-03T00:00:00.000Z