rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-10207 
A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: Red Hat
product: kernel
Published: 2019-11-25T13:51:16.000Z
CVE-2019-10208 
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: PostgreSQL
product: postgresql
Published: 2019-10-29T13:13:12.000Z
CVE-2019-10209 
Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.
Problem types: cwe_id: CWE-125
description: CWE-125
cwe_id: CWE-200
description: CWE-200
Affected products: vendor: PostgreSQL
product: postgresql
Published: 2019-10-29T13:11:45.000Z
CVE-2019-10210 
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: PostgreSQL
product: postgresql
Published: 2019-10-29T00:00:00.000Z
CVE-2019-10211 
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory.
Problem types: cwe_id: CWE-94
description: CWE-94
Affected products: vendor: PostgreSQL
product: postgresql
Published: 2019-10-29T13:15:40.000Z
CVE-2019-10212 
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: RedHat
product: undertow
Published: 2019-10-02T18:22:08.000Z
CVE-2019-10213 
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user.
Problem types: cwe_id: CWE-117
description: CWE-117
Affected products: vendor: Red Hat
product: openshift
Published: 2019-11-25T14:21:21.000Z
CVE-2019-10214 
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launch a MiTM attack and steal login credentials or bearer tokens.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: n/a
product: containers/image
Published: 2019-11-25T10:41:15.000Z
CVE-2019-10215 
Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: bootstrap3-typeahead.js
Published: 2019-10-08T18:44:41.000Z
CVE-2019-10216 
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
Problem types: cwe_id: CWE-648
description: CWE-648
Affected products: vendor: ghostscript
product: ghostscript
Published: 2019-11-27T12:10:12.000Z
CVE-2019-10217 
A flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be set as such by no_log feature. Some of these fields in GCP modules are not set properly. service_account_contents() which is common class for all gcp modules is not setting no_log to True. Any sensitive data managed by that function would be leak as an output when running ansible playbooks.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: Ansible
Published: 2019-11-25T15:06:19.000Z
CVE-2019-10218 
A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: Samba
product: samba
Published: 2019-11-06T00:00:00.000Z
CVE-2019-10219 
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Hibernate
product: hibernate-validator
default_status: unknown
Published: 2019-11-08T14:46:03.000Z
CVE-2019-10220 
Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: SUSE
product: kernel:
Published: 2019-11-27T15:30:15.000Z
CVE-2019-10221 
A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: [UNKNOWN]
product: pki-core
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
version: 3.1
Published: 2020-03-20T13:55:48.000Z
CVE-2019-10222 
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
Problem types: cwe_id: CWE-755
description: CWE-755
Affected products: vendor: The Ceph Project
product: ceph
Published: 2019-11-08T14:45:41.000Z
CVE-2019-10223 
A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However, a combination of the default `kubectl` behavior and this new feature can cause the entire secret content to end up in metric labels thus inadvertently exposing the secret content in metrics. This feature has been reverted and released as the v1.7.2 release. If you are running the v1.7.0 or v1.7.1 release, please upgrade to the v1.7.2 release as soon as possible.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: kube-state-metrics
Published: 2019-11-05T11:40:37.000Z
CVE-2019-10224 
A flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose mode, the dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An attacker, able to see the screen or record the terminal standard error output, could use this flaw to gain sensitive information.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: Red Hat
product: 389-ds-base
Published: 2019-11-25T00:00:00.000Z
CVE-2019-10225 
A flaw was found in atomic-openshift of openshift-4.2 where the basic-user RABC role in OpenShift Container Platform doesn't sufficiently protect the GlusterFS StorageClass against leaking of the restuserkey. An attacker with basic-user permissions is able to obtain the value of restuserkey, and use it to authenticate to the GlusterFS REST service, gaining access to read, and modify files.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: n/a
product: atomic-openshift
Published: 2021-03-19T20:01:33.000Z
CVE-2019-10226 
HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI. NOTE: the vendor disputes the significance of this report because some HTML formatting (such as with an H1 element) is allowed, but there is a XSS protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-10T00:00:00.000Z
CVE-2019-10227 
openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T17:44:02.000Z
CVE-2019-10229 
An issue was discovered in MailStore Server (and Service Provider Edition) 9.x through 11.x before 11.2.2. When the directory service (for synchronizing and authenticating users) is set to Generic LDAP, an attacker is able to login as an existing user with an arbitrary password on the second login attempt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T14:25:44.000Z
CVE-2019-10231 
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T16:22:43.000Z
CVE-2019-10232 
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T16:23:10.000Z
CVE-2019-10233 
Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T16:23:27.000Z
CVE-2019-10237 
S-CMS PHP v1.0 has a CSRF vulnerability to add a new admin user via the 4.edu.php/admin/ajax.php?type=admin&action=add&lang=0 URI, a related issue to CVE-2019-9040.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T17:45:23.000Z
CVE-2019-10238 
Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-27T17:45:38.000Z
CVE-2019-10239 
Robotronic RunAsSpc 3.7.0.0 protects stored credentials insufficiently, which allows locally authenticated attackers (under the same user context) to obtain cleartext credentials of the stored account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-24T14:12:54.000Z
CVE-2019-10240 
Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.
Problem types: cwe_id: CWE-829
description: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
cwe_id: CWE-494
description: CWE-494: Download of Code Without Integrity Check
Affected products: vendor: The Eclipse Foundation
product: Eclipse hawkBit
Published: 2019-04-03T18:04:29.000Z
CVE-2019-10241 
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2019-04-22T20:14:49.000Z
CVE-2019-10242 
In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number of file types.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Kura
Published: 2019-04-09T15:42:42.000Z
CVE-2019-10243 
In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.
Problem types: cwe_id: CWE-497
description: CWE-497: Exposure of System Data to an Unauthorized Control Sphere
Affected products: vendor: The Eclipse Foundation
product: Eclipse Kura
Published: 2019-04-09T15:42:42.000Z
CVE-2019-10244 
In Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis simple Mqtt component and the emulator position service (not part of the device distribution) could potentially be target of XXE attack due to an improper factory and parser initialisation.
Problem types: cwe_id: CWE-611
description: CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: The Eclipse Foundation
product: Eclipse Kura
Published: 2019-04-09T15:42:42.000Z
CVE-2019-10245 
In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: The Eclipse Foundation
product: Eclipse OpenJ9
Published: 2019-04-19T13:43:31.000Z
CVE-2019-10246 
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.
Problem types: cwe_id: CWE-213
description: CWE-213: Intentional Information Exposure
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2019-04-22T20:14:49.000Z
CVE-2019-10247 
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.
Problem types: cwe_id: CWE-213
description: CWE-213: Intentional Information Exposure
Affected products: vendor: The Eclipse Foundation
product: Eclipse Jetty
Published: 2019-04-22T20:14:49.000Z
CVE-2019-10248 
Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected.
Problem types: cwe_id: CWE-829
description: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
cwe_id: CWE-494
description: CWE-494: Download of Code Without Integrity Check
Affected products: vendor: The Eclipse Foundation
product: Eclipse Vorto
Published: 2019-04-22T20:15:24.000Z
CVE-2019-10249 
All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.
Problem types: cwe_id: CWE-829
description: CWE-829: Inclusion of Functionality from Untrusted Control Sphere
cwe_id: CWE-494
description: CWE-494: Download of Code Without Integrity Check
Affected products: vendor: The Eclipse Foundation
product: Eclipse Xtext
Published: 2019-05-06T16:12:09.000Z
CVE-2019-10250 
UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T14:00:43.000Z
CVE-2019-10251 
The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files (related to libpicsel), which allows MITM attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T14:01:04.000Z
CVE-2019-10253 
A Cross-Site Request Forgery (CSRF) vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data (upload malicious/forged files on a TeamMate server, or replace existing uploaded files with malicious/forged files). The specific flaw exists within the handling of Upload/DomainObjectDocumentUpload.ashx requests because of failure to validate a CSRF token before handling a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-09T20:51:39.000Z
CVE-2019-10254 
In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T14:45:37.000Z
CVE-2019-10255 
An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a base_url prefix are not affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T15:30:39.000Z
CVE-2019-10256 
An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T18:02:45.000Z
CVE-2019-10257 
Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location (dot-dot-slash notation) to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java sources from /WEB-INF/classes/*.class
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T13:51:46.000Z
CVE-2019-10260 
Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T16:24:01.000Z
CVE-2019-10261 
CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-03T14:07:38.000Z
CVE-2019-10262 
A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-28T21:42:18.000Z
CVE-2019-10263 
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When creating a trial account, it is possible to inject XSS in the Alias field, allowing the attacker to retrieve the admin's cookie and take over the account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T20:44:23.000Z
CVE-2019-10264 
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the "Move / Import / Export Users" screen has an Import Users option. This option accepts a ZIP archive containing a users.xml file that can trigger XXE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T20:46:24.000Z
CVE-2019-10265 
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system/ShowAdvanced.do "File Explorer" screen, it is possible to change the directory in the JavaScript code. If changed to (for example) "C:" then one can browse the whole server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T20:49:15.000Z
CVE-2019-10266 
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL, it is possible to read the file structure and even the content of files without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T20:51:46.000Z
CVE-2019-10267 
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the configured user (e.g., Administrator).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-26T20:53:37.000Z
CVE-2019-10269 
BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-29T04:54:04.000Z
CVE-2019-10270 
An arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It is possible (due to lack of verification and correlation between the reset password key sent by mail and the user_id parameter) to reset the password of another user. One only needs to know the user_id, which is publicly available. One just has to intercept the password modification request and modify user_id. It is possible to modify the passwords for any users or admin WordPress Ultimate Members. This could lead to account compromise and privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-21T17:44:51.000Z
CVE-2019-10271 
An issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It allows unauthorized profile and cover picture modification. It is possible to modify the profile and cover picture of any user once one is connected. One can also modify the profiles and cover pictures of privileged users. To perform such a modification, one first needs to (for example) intercept an upload-picture request and modify the user_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-24T18:11:59.000Z