rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-11978 
An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2020-07-16T00:00:00.000Z
CVE-2020-11979 
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
Problem types: description: insecure temporary file vulnerability
cwe_id: CWE-379
description: CWE-379 Creation of Temporary File in Directory with Incorrect Permissions
Affected products: vendor: n/a
product: Apache Ant
Published: 2020-10-01T19:24:57.000Z
CVE-2020-11980 
In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" role. In the 'etc/jmx.acl.cfg', such as role can call get*. It's possible to authenticate as a viewer role + invokes on the MLet getMBeansFromURL method, which goes off to a remote server to fetch the desired MBean, which is then registered in Karaf. At this point the attack fails as "viewer" doesn't have the permission to invoke on the MBean. Still, it could act as a SSRF style attack and also it essentially allows a "viewer" role to pollute the MBean registry, which is a kind of privilege escalation. The vulnerability is low as it's possible to add a ACL to limit access. Users should update to Apache Karaf 4.2.9 or newer.
Problem types: description: JMX MBean arbitrary creation
Affected products: vendor: n/a
product: Apache Karaf
Published: 2020-06-12T21:55:34.000Z
CVE-2020-11981 
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2020-07-16T23:21:18.000Z
CVE-2020-11982 
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious payload directly to the broker which could lead to a deserialization attack (and thus remote code execution) on the Worker.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2020-07-16T23:21:25.000Z
CVE-2020-11983 
An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated users with appropriate permissions to create stored XSS attacks.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2020-07-16T23:21:30.000Z
CVE-2020-11984 
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Problem types: description: mod_uwsgi buffer overflow
Affected products: vendor: n/a
product: Apache HTTP Server
Published: 2020-08-07T15:27:15.000Z
CVE-2020-11985 
IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.
Problem types: cwe_id: CWE-345
description: CWE-345: Insufficient verification of data authenticity
Affected products: vendor: n/a
product: Apache HTTP Server
Published: 2020-08-07T15:36:31.000Z
CVE-2020-11986 
To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This causes the code of the build script to be invoked at load time of the project. Apache NetBeans up to and including 12.0 did not request consent from the user for the analysis of the project at load time. This in turn will run potentially malicious code, from an external source, without the consent of the user.
Problem types: description: Code execution without user consent
Affected products: vendor: n/a
product: Apache NetBeans
Published: 2020-09-09T15:28:59.000Z
CVE-2020-11987 
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Batik
Published: 2021-02-24T00:00:00.000Z
CVE-2020-11988 
Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users should upgrade to 2.6 or later.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache XmlGraphics Commons
Published: 2021-02-24T17:05:39.000Z
CVE-2020-11989 
Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
Problem types: description: Authentication Bypass by Primary Weakness
Affected products: vendor: Apache Software Foundation
product: Apache Shiro
Published: 2020-06-22T18:06:37.000Z
CVE-2020-11990 
We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who could install (or lead the victim to install) a specially crafted (or malicious) Android application would be able to access pictures taken with the app externally.
Problem types: description: Exposure of Sensitive Information
Affected products: vendor: n/a
product: Apache Cordova ( cordova-plugin-camera )
Published: 2020-12-01T16:46:08.000Z
CVE-2020-11991 
When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Cocoon
Published: 2020-09-11T13:28:20.000Z
CVE-2020-11993 
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.
Problem types: description: Push Diary Crash on Specifically Crafted HTTP/2 Header
Affected products: vendor: n/a
product: Apache HTTP Server
Published: 2020-08-07T15:32:55.000Z
CVE-2020-11994 
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
Problem types: description: Server-Side Template Injection and arbitrary file disclosure
Affected products: vendor: n/a
product: Apache Camel
Published: 2020-07-08T15:13:02.000Z
CVE-2020-11995 Apache Dubbo default deserialization protocol Hessian2 cause CRE
A deserialization vulnerability existed in dubbo 2.7.5 and its earlier versions, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protool, during Hessian2 deserializing the HashMap object, some functions in the classes stored in HasMap will be executed after a series of program calls, however, those special functions may cause remote command execution. For example, the hashCode() function of the EqualsBean class in rome-1.7.0.jar will cause the remotely load malicious classes and execute malicious code by constructing a malicious request. This issue was fixed in Apache Dubbo 2.6.9 and 2.7.8.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Apache Software Foundation
product: Apache Dubbo
Published: 2021-01-11T09:40:19.000Z
CVE-2020-11996 
A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server could become unresponsive.
Problem types: description: Denial of Service
Affected products: vendor: Apache
product: Apache Tomcat
Published: 2020-06-26T16:27:20.000Z
CVE-2020-11997 
Apache Guacamole 1.2.0 and earlier do not consistently restrict access to connection history based on user visibility. If multiple users share access to the same connection, those users may be able to see which other users have accessed that connection, as well as the IP addresses from which that connection was accessed, even if those users do not otherwise have permission to see other users.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Guacamole
Published: 2021-01-19T21:12:29.000Z
CVE-2020-11998 
A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https://docs.oracle.com/javase/8/docs/technotes/guides/management/agent.html "A remote client could create a javax.management.loading.MLet MBean and use it to create new MBeans from arbitrary URLs, at least if there is no security manager. In other words, a rogue remote client could make your Java application execute arbitrary code." Mitigation: Upgrade to Apache ActiveMQ 5.15.13
Problem types: description: Arbitrary code execution via JMX
Affected products: vendor: n/a
product: Apache ActiveMQ
Published: 2020-09-10T18:10:22.000Z
CVE-2020-11999 
FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. An exposed API call allows users to provide files to be processed without sanitation. This may allow an attacker to specify a filename to execute unauthorized code and modify files or data.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: n/a
product: FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software
Published: 2020-06-15T19:11:50.000Z
CVE-2020-12000 
The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
Problem types: cwe_id: CWE-502
description: DESERIALIZATION OF UNTRUSTED DATA CWE-502
Affected products: vendor: n/a
product: Ignition 8 Gateway
Published: 2020-06-09T17:54:03.000Z
CVE-2020-12001 
FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. The parsing mechanism that processes certain file types does not provide input sanitation. This may allow an attacker to use specially crafted files to traverse the file system and modify or expose sensitive data or execute arbitrary code.
Problem types: cwe_id: CWE-20
description: IMPROPER INPUT VALIDATION CWE-20
Affected products: vendor: n/a
product: FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software
Published: 2020-06-15T19:14:18.000Z
CVE-2020-12002 
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data, which may allow remote code execution.
Problem types: cwe_id: CWE-121
description: STACK-BASED BUFFER OVERFLOW CWE-121
Affected products: vendor: n/a
product: Advantech WebAccess Node
Published: 2020-05-08T11:50:42.000Z
CVE-2020-12003 
FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. An exposed API call allows users to provide files to be processed without sanitation. This may allow an attacker to use specially crafted requests to traverse the file system and expose sensitive data on the local hard drive.
Problem types: cwe_id: CWE-22
description: IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
Affected products: vendor: n/a
product: FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software
Published: 2020-06-15T19:16:36.000Z
CVE-2020-12004 
The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
Problem types: cwe_id: CWE-306
description: MISSING AUTHENTICATION FOR CRITICAL FUNCTION CWE-306
Affected products: vendor: n/a
product: Ignition 8 Gateway
Published: 2020-06-09T17:16:04.000Z
CVE-2020-12005 
FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 and later, Studio 5000 Launcher: Version 31 and later Stud, 5000 Logix Designer software: Version 32 and prior is vulnerable. A vulnerability exists in the communication function that enables users to upload EDS files by FactoryTalk Linx. This may allow an attacker to upload a file with bad compression, consuming all the available CPU resources, leading to a denial-of-service condition.
Problem types: cwe_id: CWE-434
description: UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE CWE-434
Affected products: vendor: n/a
product: FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software
Published: 2020-06-15T19:22:59.000Z
CVE-2020-12006 
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application’s control.
Problem types: cwe_id: CWE-23
description: RELATIVE PATH TRAVERSAL CWE-23
Affected products: vendor: n/a
product: Advantech WebAccess Node
Published: 2020-05-08T11:41:41.000Z
CVE-2020-12007 
A specially crafted communication packet sent to the affected devices could allow remote code execution and a denial-of-service condition due to a deserialization vulnerability. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; ICONICS GenBroker32 version 9.5 and prior.
Problem types: cwe_id: CWE-502
description: DESERIALIZATION OF UNTRUSTED DATA CWE-502
Affected products: vendor: Mitsubishi Electric
product: MC Works64
vendor: Mitsubishi Electric
product: MC Works32
vendor: ICONICS
product: GenBroker64, Platform Services, Workbench, FrameWorX Server
vendor: ICONICS
product: GenBroker32
Published: 2020-07-16T21:49:12.000Z
CVE-2020-12008 
Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order information with an order entry system. This could allow an attacker with network access to view sensitive data including PHI.
Problem types: cwe_id: CWE-319
description: CLEARTEXT TRANSMISSION OF SENSITIVE DATA CWE-319
Affected products: vendor: n/a
product: Baxter ExactaMix EM 2400 & EM 1200
Published: 2020-06-29T13:53:25.000Z
CVE-2020-12009 
A specially crafted communication packet sent to the affected device could cause a denial-of-service condition due to a deserialization vulnerability. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server v10.96 and prior; ICONICS GenBroker32 v9.5 and prior.
Problem types: cwe_id: CWE-502
description: DESERIALIZATION OF UNTRUSTED DATA CWE-502
Affected products: vendor: Mitsubishi Electric
product: MC Works64
vendor: Mitsubishi Electric
product: MC Works32
vendor: ICONICS
product: GenBroker64, Platform Services, Workbench, FrameWorX Server
vendor: ICONICS
product: GenBroker32
Published: 2020-07-16T19:39:24.072Z
CVE-2020-12010 
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an authenticated user to use a specially crafted file to delete files outside the application’s control.
Problem types: cwe_id: CWE-23
description: RELATIVE PATH TRAVERSAL CWE-23
Affected products: vendor: n/a
product: Advantech WebAccess Node
Published: 2020-05-08T11:40:22.000Z
CVE-2020-12011 
A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code execution. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; GenBroker32 version 9.5 and prior.
Problem types: cwe_id: CWE-787
description: OUT-OF-BOUNDS WRITE CWE-787
Affected products: vendor: n/a
product: Mitsubishi Electric MC Works64
vendor: n/a
product: MC Works32
vendor: n/a
product: ICONICS  GenBroker64, Platform Services, Workbench, FrameWorX Server
vendor: n/a
product: GenBroker32
Published: 2020-07-16T18:53:05.000Z
CVE-2020-12012 
Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13, and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 have hard-coded administrative account credentials for the ExactaMix application. Successful exploitation of this vulnerability may allow an attacker with physical access to gain unauthorized access to view/update system configuration or data. This could impact confidentiality and integrity of the system and risk exposure of sensitive information including PHI.
Problem types: cwe_id: CWE-259
description: USE OF HARD-CODED PASSWORD CWE-259
Affected products: vendor: n/a
product: Baxter ExactaMix EM 2400 & EM 1200
Published: 2020-06-29T13:54:53.000Z
CVE-2020-12013 
A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 Version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server v10.96 and prior; ICONICS GenBroker32 v9.5 and prior.
Problem types: cwe_id: CWE-94
description: IMPROPER CONTROL OF GENERATION OF CODE ('CODE INJECTION') CWE-94
Affected products: vendor: Mitsubishi Electric
product: MC Works64
vendor: Mitsubishi Electric
product: MC Works32
vendor: ICONICS
product: GenBroker64, Platform Services, Workbench, FrameWorX Server
vendor: ICONICS
product: GenBroker32
Published: 2020-07-16T21:14:34.000Z
CVE-2020-12014 
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized and may allow an attacker to inject SQL commands.
Problem types: cwe_id: CWE-89
description: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND ('SQL INJECTION') CWE-89
Affected products: vendor: n/a
product: Advantech WebAccess Node
Published: 2020-05-08T11:46:31.000Z
CVE-2020-12015 
A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue affects: Mitsubishi Electric MC Works64 version 4.02C (10.95.208.31) and earlier, all versions; Mitsubishi Electric MC Works32 version 3.00A (9.50.255.02); ICONICS GenBroker64, Platform Services, Workbench, FrameWorX Server version 10.96 and prior; ICONICS GenBroker32 version 9.5 and prior.
Problem types: cwe_id: CWE-502
description: DESERIALIZATION OF UNTRUSTED DATA CWE-502
Affected products: vendor: Mitsubishi Electric
product: MC Works64
vendor: Mitsubishi Electric
product: MC Works32
vendor: ICONICS
product: GenBroker64, Platform Services, Workbench, FrameWorX Server
vendor: ICONICS
product: GenBroker32
Published: 2020-07-16T21:30:43.000Z
CVE-2020-12016 
Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 have hard-coded administrative account credentials for the ExactaMix operating system. Successful exploitation of this vulnerability may allow an attacker who has gained unauthorized access to system resources, including access to execute software or to view/update files, directories, or system configuration. This could allow an attacker with network access to view sensitive data including PHI.
Problem types: cwe_id: CWE-259
description: USE OF HARD-CODED PASSWORD CWE-259
Affected products: vendor: n/a
product: Baxter ExactaMix EM 2400 & EM 1200
Published: 2020-06-29T13:54:50.000Z