rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-1250 
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based Authorization control implemented only in Unisphere GUI.
Problem types: description: Authorization Bypass
Affected products: vendor: Dell EMC
product: Dell EMC Unity
vendor: Dell EMC
product: Dell EMC UnityVSA
Published: 2018-09-28T18:00:00.000Z
CVE-2018-1251 
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect Unity users to arbitrary web URLs by tricking the victim user to click on a maliciously crafted Unisphere URL. Attacker could potentially phish information, including Unisphere users' credentials, from the victim once they are redirected.
Problem types: description: URL Redirection
Affected products: vendor: Dell EMC
product: Dell EMC Unity
vendor: Dell EMC
product: Dell EMC UnityVSA
Published: 2018-09-28T18:00:00.000Z
CVE-2018-1252 RSA Web Threat Detection SQL Injection Vulnerability
RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the tool's monitoring and user information by supplying specially crafted input data to the affected application.
Problem types: description: SQL Injection	Vulnerability
Affected products: vendor: RSA
product: Web Threat Detection
Published: 2018-06-05T12:00:00.000Z
CVE-2018-1253 Stored cross-site scripting vulnerability
RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A malicious Operations Console administrator could potentially exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Problem types: description: xss vulnerability
Affected products: vendor: RSA
product: Authentication Manager
Published: 2018-06-21T15:00:00.000Z
CVE-2018-1254 
RSA Authentication Manager Security Console, versions 8.3 P1 and earlier, contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim Security Console administrator to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.
Problem types: description: Reflected cross-site scripting vulnerability
Affected products: vendor: RSA
product: RSA Authentication Manager
Published: 2018-06-21T15:00:00.000Z
CVE-2018-1255 Reflected Cross-Site Scripting Vulnerability
RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.
Problem types: description: Reflected Cross-Site Scripting Vulnerability
Affected products: vendor: RSA
product: RSA Identity Governance and Lifecycle
Published: 2018-07-13T17:00:00.000Z
CVE-2018-1256 
Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound resource servers which use this version of the SSO Connector with tokens generated from another service plan.
Problem types: description: Improper Access Control
Affected products: vendor: Pivotal
product: Spring Cloud SSO Connector
Published: 2018-05-07T15:00:00.000Z
CVE-2018-1257 
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a regular expression, denial of service attack.
Problem types: description: ReDoS
Affected products: vendor: Pivotal
product: Spring Framework
Published: 2018-05-11T20:00:00.000Z
CVE-2018-1258 
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.
Problem types: description: Authorization Bypass
Affected products: vendor: Pivotal
product: Spring Framework
Published: 2018-05-11T20:00:00.000Z
CVE-2018-1259 
Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data's projection-based request payload binding to access arbitrary files on the system.
Problem types: description: XML Parsing
Affected products: vendor: Pivotal
product: Spring Data Commons
Published: 2018-05-11T20:00:00.000Z
CVE-2018-1260 
Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to the authorization endpoint that can lead to remote code execution when the resource owner is forwarded to the approval endpoint.
Problem types: description: Remote Code Execution
Affected products: vendor: Pivotal
product: Spring Security OAuth
Published: 2018-05-11T20:00:00.000Z
CVE-2018-1261 
Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
Problem types: description: Directory Traversal
Affected products: vendor: Pivotal
product: Spring Integration Zip
Published: 2018-05-11T20:00:00.000Z
CVE-2018-1262 
Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to admin privileges in the impersonated zone for clients performing offline token validation.
Problem types: description: Privilege escalation
Affected products: vendor: Cloud Foundry
product: CloudFoundry UAA
Published: 2018-05-15T20:00:00.000Z
CVE-2018-1263 
Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
Problem types: description: Directory Traversal
Affected products: vendor: Pivotal
product: Spring Integration Zip
Published: 2018-05-15T20:00:00.000Z
CVE-2018-1264 Log Cache logs UAA client secret on startup
Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report. A remote attacker who has gained access to the Log Cache VM can read this secret, gaining all privileges held by the Log Cache UAA client. In the worst case, if this client is an admin, the attacker would gain complete control over the Foundation.
Problem types: description: Information Exposure Through Log Files
Affected products: vendor: Cloud Foundry
product: log-cache-release
Published: 2018-10-05T21:00:00.000Z
CVE-2018-1265 
Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.
Problem types: description: Directory Traversal
Affected products: vendor: Cloud Foundry
product: Diego
Published: 2018-06-06T20:00:00.000Z
CVE-2018-1266 
Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities. An authenticated malicious user can predict the location of application blobs and leverage path traversal to create a malicious application that has the ability to overwrite arbitrary files on the Cloud Controller instance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T16:00:00.000Z
CVE-2018-1267 
Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T16:00:00.000Z
CVE-2018-1268 
Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not validate app GUID structure in requests. A remote authenticated malicious user knowing the GUID of an app may construct malicious requests to read from or write to the logs of that app.
Problem types: description: Authorization Error
Affected products: vendor: Cloud Foundry
product: Loggregator
Published: 2018-06-06T20:00:00.000Z
CVE-2018-1269 
Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP connections, which could cause denial of service.
Problem types: description: Denial of service
Affected products: vendor: Cloud Foundry
product: Loggregator
Published: 2018-06-06T20:00:00.000Z
CVE-2018-1270 
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.
Problem types: cwe_id: CWE-94
description: CWE-94 - Code Injection
Affected products: vendor: Spring by Pivotal
product: Spring Framework
Published: 2018-04-06T13:00:00.000Z
CVE-2018-1271 
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.
Problem types: cwe_id: CWE-22
description: CWE-22 - Path Traversal
Affected products: vendor: Spring by Pivotal
product: Spring Framework
Published: 2018-04-06T13:00:00.000Z
CVE-2018-1272 
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses that input to make a multipart request to another server (server B), it can be exposed to an attack, where an extra multipart is inserted in the content of the request from server A, causing server B to use the wrong value for a part it expects. This could to lead privilege escalation, for example, if the part content represents a username or user roles.
Problem types: description: CAPEC-233 - Privilege Escalation
Affected products: vendor: Spring by Pivotal
product: Spring Framework
Published: 2018-04-06T13:00:00.000Z
CVE-2018-1273 
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.
Problem types: cwe_id: CWE-94
description: CWE-94 - Code Injection
Affected products: vendor: Spring by Pivotal
product: Spring Framework
Published: 2018-04-11T13:00:00.000Z
CVE-2018-1274 
Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation. An unauthenticated remote malicious user (or attacker) can issue requests against Spring Data REST endpoints or endpoints using property path parsing which can cause a denial of service (CPU and memory consumption).
Problem types: description: Denial of Service
Affected products: vendor: Spring by Pivotal
product: Spring Framework
Published: 2018-04-18T16:00:00.000Z
CVE-2018-1275 
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.
Problem types: cwe_id: CWE-94
description: CWE-94 - Code Injection
Affected products: vendor: Spring by Pivotal
product: Spring Framework
Published: 2018-04-11T13:00:00.000Z
CVE-2018-1276 
Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM, which may contain BOSH credentials.
Problem types: description: Information exposure
Affected products: vendor: Cloud Foundry
product: Windows2012R2 stemcell
Published: 2018-05-17T20:00:00.000Z
CVE-2018-1277 
Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS against the cell.
Problem types: description: Denial of Service
Affected products: vendor: Cloud Foundry
product: Garden-runC
Published: 2018-04-30T20:00:00.000Z
CVE-2018-1278 
Apps Manager included in Pivotal Application Service, versions 1.12.x prior to 1.12.22, 2.0.x prior to 2.0.13, and 2.1.x prior to 2.1.4 contains an authorization enforcement vulnerability. A member of any org is able to create invitations to any org for which the org GUID can be discovered. Accepting this invitation gives unauthorized access to view the member list, domains, quotas and other information about the org.
Problem types: description: Authorization Error
Affected products: vendor: Pivotal
product: Pivotal Application Service
Published: 2018-05-11T20:00:00.000Z
CVE-2018-1279 RabbitMQ cluster compromise due to deterministically generated cookie
Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology can guess this cookie and, if they have access to the right ports on any server in the MQ cluster can use this cookie to gain full control over the entire cluster.
Problem types: description: Use of Insufficiently Random Values
Affected products: vendor: Pivotal
product: RabbitMq for PCF
Published: 2018-12-10T19:00:00.000Z
CVE-2018-1280 
Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents.
Problem types: description: SQL Injection
Affected products: vendor: Pivotal
product: Greenplum Command Center
Published: 2018-05-11T20:00:00.000Z
CVE-2018-1281 
The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via the DMLC_PS_ROOT_URI and DMLC_PS_ROOT_PORT env variables. In versions older than 1.0.0, however, the MXNet framework will listen on 0.0.0.0 rather than user specified DMLC_PS_ROOT_URI once a scheduler node is initialized. This exposes the instance running MXNet to any attackers reachable via the interface they didn't expect to be listening on. For example: If a user wants to run a clustered setup locally, they may specify to run on 127.0.0.1. But since MXNet will listen on 0.0.0.0, it makes the port accessible on all network interfaces.
Problem types: description: Allows unauthorized access
Affected products: vendor: Apache Software Foundation
product: Apache MXNet
Published: 2018-06-08T19:00:00.000Z
CVE-2018-1282 
This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.
Problem types: description: SQL Injection
Affected products: vendor: Apache Software Foundation
product: Apache Hive
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1283 
In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.
Problem types: description: Tampering of mod_session data for CGI applications.
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Published: 2018-03-26T15:00:00.000Z
CVE-2018-1284 
In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xpath_double/xpath_float/xpath_long/xpath_int/xpath_short) to expose the content of a file on the machine running HiveServer2 owned by HiveServer2 user (usually hive) if hive.server2.enable.doAs=false.
Problem types: description: XML Injection
Affected products: vendor: Apache Software Foundation
product: Apache Hive
Published: 2018-04-05T13:00:00.000Z
CVE-2018-1285 
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
Problem types: description: XXE
Affected products: vendor: n/a
product: Apache log4net
Published: 2020-05-11T16:41:28.000Z
CVE-2018-1286 
In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users.
Problem types: description: Insufficient Access Controls
Affected products: vendor: Apache Software Foundation
product: Apache OpenMeetings
Published: 2018-02-28T18:00:00.000Z
CVE-2018-1287 
In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
Problem types: description: Unauthorized code execution
Affected products: vendor: Apache Software Foundation
product: Apache JMeter
Published: 2018-02-14T14:00:00.000Z
CVE-2018-1288 
In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Kafka
Published: 2018-07-26T14:00:00.000Z
CVE-2018-1289 
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, the system exposes different REST end points to query domain specific entities with a Query Parameter 'orderBy' and 'sortOrder' which are appended directly with SQL statements. A hacker/user can inject/draft the 'orderBy' and 'sortOrder' query parameter in such a way to read/update the data for which he doesn't have authorization.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Fineract
Published: 2018-04-20T18:00:00.000Z
CVE-2018-1290 
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of MakercheckersApiResource Class.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Fineract
Published: 2018-04-20T18:00:00.000Z
CVE-2018-1291 
Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating exposes different REST end points to query domain specific entities with a Query Parameter 'orderBy' which are appended directly with SQL statements. A hacker/user can inject/draft the 'orderBy' query parameter by way of the "order" param in such a way to read/update the data for which he doesn't have authorization.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Fineract
Published: 2018-04-20T18:00:00.000Z
CVE-2018-1292 
Within the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, a hacker could inject SQL to read/update data for which he doesn't have authorization for by way of the 'reportName' parameter.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Fineract
Published: 2018-04-20T18:00:00.000Z
CVE-2018-1294 
If a user of Apache Commons Email (typically an application programmer) passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details (recipients, contents, etc.) might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You can mitigate this vulnerability for older versions of Commons Email by stripping line-breaks from data, that will be passed to Email.setBounceAddress(String).
Problem types: description: Insufficient Data Validation
Affected products: vendor: Apache Software Foundation
product: Apache Commons Email
Published: 2018-03-20T17:00:00.000Z