rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-14994 
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3.16.8, from version 4.0.0 before version 4.1.3, from version 4.2.0 before version 4.2.5, from version 4.3.0 before version 4.3.4, and version 4.4.0 allows remote attackers with portal access to view arbitrary issues in Jira Service Desk projects via a path traversal vulnerability. Note that when the 'Anyone can email the service desk or raise a request in the portal' setting is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.
Problem types: description: Path Traversal
Affected products: vendor: Atlassian
product: Jira Service Desk Server
vendor: Atlassian
product: Jira Service Desk Data Center
Published: 2019-09-19T14:20:53.238Z
CVE-2019-14995 
The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check.
Problem types: cwe_id: CWE-863
description: Incorrect Authorization (CWE-863)
Affected products: vendor: Atlassian
product: Jira
Published: 2019-09-11T13:56:26.083Z
CVE-2019-14996 
The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Jira
Published: 2019-09-11T13:56:26.155Z
CVE-2019-14997 
The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose through caching vulnerability when Jira is configured with a reverse Proxy and or a load balancer with caching or a CDN.
Problem types: cwe_id: CWE-524
description: Information Exposure Through Caching (CWE-524)
Affected products: vendor: Atlassian
product: Jira
Published: 2019-09-11T13:56:26.203Z
CVE-2019-14998 
The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via "cookie tossing" a CSRF cookie from a subdomain of a Jira instance.
Problem types: description: N/A
Affected products: vendor: Atlassian
product: Jira
Published: 2019-09-11T13:56:26.253Z
CVE-2019-14999 
The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery (CSRF) vulnerability on an authenticated administrator.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Atlassian
product: Universal Plugin Manager
Published: 2019-08-23T13:49:47.751Z
CVE-2019-15000 
The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed version for 5.16.x ), from 6.0.0 before 6.0.10 (the fixed version for 6.0.x), from 6.1.0 before 6.1.8 (the fixed version for 6.1.x), from 6.2.0 before 6.2.6 (the fixed version for 6.2.x), from 6.3.0 before 6.3.5 (the fixed version for 6.3.x), from 6.4.0 before 6.4.3 (the fixed version for 6.4.x), and from 6.5.0 before 6.5.2 (the fixed version for 6.5.x) allows remote attackers who have permission to access a repository, if public access is enabled for a project or repository then attackers are able to exploit this issue anonymously, to read the contents of arbitrary files on the system and execute commands via injecting additional arguments into git commands.
Problem types: description: Argument Injection
Affected products: vendor: Atlassian
product: Bitbucket Server
vendor: Atlassian
product: Bitbucket Data Center
Published: 2019-09-19T14:24:38.322Z
CVE-2019-15001 
The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, from 8.2.0 before 8.2.5, from 8.3.0 before 8.3.4 and from 8.4.0 before 8.4.1 allows remote attackers with Administrator permissions to gain remote code execution via a template injection vulnerability through the use of a crafted PUT request.
Problem types: description: Template injection
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2019-09-19T14:28:36.566Z
CVE-2019-15002 
An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker can log a user into the system under an unexpected account.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Jira Data Center
Published: 2025-02-11T17:24:15.763Z
CVE-2019-15003 
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view arbitrary issues in Jira Service Desk projects via authorization bypass. Note that when the 'Anyone can email the service desk or raise a request in the portal' setting is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.
Problem types: description: Authorization Bypass
Affected products: vendor: Atlassian
product: Jira Service Desk Server
vendor: Atlassian
product: Jira Service Desk Data Center
Published: 2019-11-07T03:35:38.545Z
CVE-2019-15004 
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view arbitrary issues in Jira Service Desk projects via a path traversal vulnerability. Note that when the 'Anyone can email the service desk or raise a request in the portal' setting is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.
Problem types: description: Path Traversal
Affected products: vendor: Atlassian
product: Jira Service Desk Server
vendor: Atlassian
product: Jira Service Desk Data Center
Published: 2019-11-07T03:35:38.947Z
CVE-2019-15005 
The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing authorization check. The email message may contain configuration information about the application that the plugin is installed into. A vulnerable version of the plugin is included with Bitbucket Server / Data Center before 6.6.0, Confluence Server / Data Center before 7.0.1, Jira Server / Data Center before 8.3.2, Crowd / Crowd Data Center before 3.6.0, Fisheye before 4.7.2, Crucible before 4.7.2, and Bamboo before 6.10.2.
Problem types: description: Improper Authorization
Affected products: vendor: Atlassian
product: Bitbucket Server
vendor: Atlassian
product: Jira Server
vendor: Atlassian
product: Confluence Server
vendor: Atlassian
product: Crowd
vendor: Atlassian
product: Fisheye
vendor: Atlassian
product: Crucible
vendor: Atlassian
product: Bamboo
Published: 2019-11-08T03:55:12.611Z
CVE-2019-15006 
There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence Data Center communicated with the Companion application via the atlassian-domain-for-localhost-connections-only.com domain name, the DNS A record of which points at 127.0.0.1. Additionally, a signed certificate for the domain was publicly distributed with the Companion application. An attacker in the position to control DNS resolution of their victim could carry out a man-in-the-middle (MITM) attack between Confluence Server (or Confluence Data Center) and the atlassian-domain-for-localhost-connections-only.com domain intended to be used with the Companion application. This certificate has been revoked, however, usage of the atlassian-domain-for-localhost-connections-only.com domain name was still present in Confluence Server and Confluence Data Center. An attacker could perform the described attack by denying their victim access to certificate revocation information, and carry out a man-in-the-middle (MITM) attack to observe files being edited using the Companion application and/or modify them, and access some limited user information.
Problem types: description: Man-in-the-Middle (MitM)
Affected products: vendor: Atlassian
product: Confluence Server
Published: 2019-12-19T00:50:12.007Z
CVE-2019-15007 
The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a missing branch.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Crucible
vendor: Atlassian
product: Fisheye
Published: 2019-12-11T14:41:13.287Z
CVE-2019-15008 
The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the reviewedBranch parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Crucible
vendor: Atlassian
product: Fisheye
Published: 2019-12-11T14:41:13.338Z
CVE-2019-15009 
The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attackers to remove another user's favourite setting for a project via an improper authorization vulnerability.
Problem types: description: Improper Access Control
Affected products: vendor: Atlassian
product: Crucible
vendor: Atlassian
product: Fisheye
Published: 2019-12-11T14:41:13.369Z
CVE-2019-15010 
Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, and from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via certain user input fields. A remote attacker with user level permissions can exploit this vulnerability to run arbitrary commands on the victim's systems. Using a specially crafted payload as user input, the attacker can execute arbitrary commands on the victim's Bitbucket Server or Bitbucket Data Center instance.
Problem types: description: Expression Language Injection
Affected products: vendor: Atlassian
product: Bitbucket Server
vendor: Atlassian
product: Bitbucket Data Center
Published: 2020-01-15T20:46:56.108Z
CVE-2019-15011 
The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check.
Problem types: description: Information Exposure
Affected products: vendor: Atlassian
product: Application Links
Published: 2019-12-17T03:45:14.059Z
CVE-2019-15012 
Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via the edit-file request. A remote attacker with write permission on a repository can write to any arbitrary file to the victims Bitbucket Server or Bitbucket Data Center instance using the edit-file endpoint, if the user has Bitbucket Server or Bitbucket Data Center running, and has the permission to write the file at that destination. In some cases, this can result in execution of arbitrary code by the victims Bitbucket Server or Bitbucket Data Center instance.
Problem types: description: Path traversal
Affected products: vendor: Atlassian
product: Bitbucket Server
vendor: Atlassian
product: Bitbucket Data Center
Published: 2020-01-15T20:46:56.181Z
CVE-2019-15013 
The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.
Problem types: description: Improper Authorization
Affected products: vendor: Atlassian
product: Jira
Published: 2019-12-18T03:30:12.315Z
CVE-2019-15014 
A command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier, that allows for an authenticated user to execute arbitrary system commands in the CLI.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15015 
In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are present in the system software, which can result in unauthorized users gaining access to the system.
Problem types: description: Use of Hard-coded Credentials
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15016 
An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by an authenticated user to be passed from the web UI into the database.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15017 
The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When combined with PAN-SA-2019-0027, this can allow an attacker to authenticate to the service using hardcoded credentials.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15018 
A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant.
Problem types: description: Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15019 
A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector.
Problem types: description: Improper Validation of Integrity Check Value
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15020 
A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector that could result in command injection.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15021 
A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network.
Problem types: description: Information Exposure Through Sent Data
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15022 
A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing.
Problem types: description: ARP Spoofing
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15023 
A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party integrations being stored in cleartext in device configuration.
Problem types: description: Cleartext Storage of Sensitive Information
Affected products: vendor: n/a
product: Palo Alto Networks Zingbox Inspector
Published: 2019-10-09T20:20:28.000Z
CVE-2019-15024 
In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the malicious replica, it can force clickhouse-server to write to arbitrary path on filesystem.
Problem types: description: Arbitrary write
Affected products: vendor: n/a
product: ClickHouse
Published: 2019-12-30T14:39:00.000Z
CVE-2019-15025 
The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T14:49:35.000Z
CVE-2019-15026 
memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T14:32:01.000Z
CVE-2019-15027 
The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clear_emmc_nomedia_entry in platform/mt6577/external/meta/emmc/meta_clr_emmc.c invokes 'system("/system/bin/rm -r /data/' followed by this filename upon an eMMC clearance from a Meta Mode boot. NOTE: compromise of Fire OS on the Amazon Echo Dot would require a second hypothetical vulnerability that allows creation of the required file under /data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T12:03:35.000Z
CVE-2019-15028 
In Joomla! before 3.9.11, inadequate checks in com_contact could allow mail submission in disabled forms.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-14T03:57:51.000Z
CVE-2019-15029 
FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-05T20:46:38.000Z
CVE-2019-15030 
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:37:22.000Z
CVE-2019-15031 
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:45:49.000Z
CVE-2019-15032 
Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-19T16:03:06.000Z
CVE-2019-15033 
Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet address in the file parameter to index.php, when sending a file to a remote server, as demonstrated by the file=http%3A%2F%2F192.168.1.2 substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-19T16:12:30.000Z
CVE-2019-15034 
hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-10T17:19:02.000Z
CVE-2019-15035 
An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentially confidential server-level data. The issue was fixed in TeamCity 2018.2.5 and 2019.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T19:32:36.000Z
CVE-2019-15036 
An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could execute any command on the server machine. The issue was fixed in TeamCity 2018.2.5 and 2019.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-02T18:36:47.000Z
CVE-2019-15037 
An issue was discovered in JetBrains TeamCity 2018.2.4. It had several XSS vulnerabilities on the settings pages. The issues were fixed in TeamCity 2019.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-02T18:34:31.000Z
CVE-2019-15038 
An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP headers. The issue was fixed in TeamCity 2019.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T15:46:08.000Z
CVE-2019-15039 
An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in TeamCity 2019.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T13:20:36.000Z
CVE-2019-15040 
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-02T18:32:50.000Z
CVE-2019-15041 
JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-01T19:35:41.000Z