rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-17470 
An issue was discovered in FNET through 4.6.4. The code that initializes the DNS client interface structure does not set sufficiently random transaction IDs (they are always set to 1 in _fnet_dns_poll in fnet_dns.c). This significantly simplifies DNS cache poisoning attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T22:40:55.000Z
CVE-2020-17473 
Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-14T19:12:48.000Z
CVE-2020-17474 
A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-14T19:22:08.000Z
CVE-2020-17475 
Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending packet data to UDP port 5000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-14T19:17:55.000Z
CVE-2020-17476 
Mibew Messenger before 3.2.7 allows XSS via a crafted user name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T16:58:43.000Z
CVE-2020-17477 
Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and school administrators to read LDAP password hashes (sambaNTPassword, krb5Key, sambaPasswordHistory, and pwhistory) via LDAP search requests. For example, a teacher can gain administrator access via an NTLM hash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-10-26T00:00:00.000Z
CVE-2020-17478 
ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T17:23:36.000Z
CVE-2020-17479 
jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T19:20:05.000Z
CVE-2020-17480 
TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard or APIs to insert content into the editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-10T19:34:35.000Z
CVE-2020-17482 
An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-02T08:21:09.000Z
CVE-2020-17483 
An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices. By visiting the vulnerable host at port 9000, we see it responds with a JSON body that has all the details about the devices which have been deployed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-16T00:00:00.000Z
CVE-2020-17484 
An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-16T00:00:00.000Z
CVE-2020-17485 
A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by uploading and executing a web/reverse shell. An attacker could then run commands, browse system files, and browse local resources
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-16T00:00:00.000Z
CVE-2020-17487 
radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECURITY.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-11T19:43:59.000Z
CVE-2020-17489 
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-11T20:07:26.000Z
CVE-2020-17490 
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-06T07:29:11.000Z
CVE-2020-17494 
Untangle Firewall NG before 16.0 uses MD5 for passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-12T20:42:40.000Z
CVE-2020-17495 
django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-11T20:54:27.000Z
CVE-2020-17496 
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T13:07:58.000Z
CVE-2020-17497 
eapol.c in iNet wireless daemon (IWD) through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T15:15:02.000Z
CVE-2020-17498 
In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-13T15:55:21.000Z
CVE-2020-17500 
Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result in unauthenticated remote code execution in the username and password fields of the logon prompt. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-07T20:51:12.000Z
CVE-2020-17502 
Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4). The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users of the administration panel to perform authenticated remote code execution. An issue exists in split_card_cmd.php in which the http parameters xmodules, ymodules and savelocking are not properly handled. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-08T17:15:57.000Z
CVE-2020-17503 
The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in split_card_cmd.php in which the http parameter "locking" is not properly handled. The NDN-210 is part of Barco TransForm N solution and this vulnerability is patched from TransForm N version 3.8 onwards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-08T17:17:37.000Z
CVE-2020-17504 
The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in ngpsystemcmd.php in which the http parameters "x_modules" and "y_modules" are not properly handled. The NDN-210 is part of Barco TransForm N solution and this vulnerability is patched from TransForm N version 3.8 onwards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-08T17:19:24.000Z
CVE-2020-17505 
Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via service_cmds_peform.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T16:33:24.000Z
CVE-2020-17506 
Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T16:33:10.000Z
CVE-2020-17507 
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-12T17:35:20.000Z
CVE-2020-17508 
The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Traffic Server
Published: 2021-01-11T09:40:20.000Z
CVE-2020-17509 
ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.
Problem types: description: Improper Enforcement of Behavioral Workflow
Affected products: vendor: n/a
product: Apache Traffic Server
Published: 2021-01-11T09:40:20.000Z
CVE-2020-17510 
Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.
Problem types: description: Authentication Bypass
Affected products: vendor: n/a
product: Apache Shiro
Published: 2020-11-05T20:17:36.000Z
CVE-2020-17511 
In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.
Problem types: description: Admin password gets logged in plain text
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Credits: lang: en
value: Ali Al-Habsi of Accellion
Published: 2020-12-14T09:40:15.000Z
CVE-2020-17513 
In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Published: 2020-12-14T09:40:15.000Z
CVE-2020-17514 disabled hostname verificiation
Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful.
Problem types: description: Missing Hostname Verification
Affected products: vendor: Apache Software Foundation
product: Apache Fineract
Credits: lang: en
value: We would like to thank Simon Gerst at https://github.com/intrigus-lgtm  for reporting this issue
Published: 2021-05-27T12:10:10.000Z
CVE-2020-17515 
The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.
Problem types: description: Reflected XSS via Origin Parameter
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Credits: lang: en
value: Ali Abdulwahab Ali Al-habsi of Accellion
Published: 2020-12-11T13:40:12.000Z
CVE-2020-17516 
Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.
Problem types: cwe_id: CWE-290
description: CWE-290: Authentication Bypass by Spoofing
Affected products: vendor: n/a
product: Apache Cassandra
Published: 2021-02-03T16:40:04.000Z
CVE-2020-17517 Ozone S3 Gateway allows bucket and key access to non authenticated users
The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default. The current security vulnerability allows access to keys and buckets through a curl command or an unauthenticated HTTP request. This enables unauthorized access to buckets and keys thereby exposing data to anonymous clients or users. This affected Apache Ozone prior to the 1.1.0 release.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: Apache Software Foundation
product: Apache Ozone
Credits: lang: en
value: Apache Ozone would like to thank Kota Uenishi for reporting this issue.
Published: 2021-04-27T08:22:22.000Z
CVE-2020-17518 Apache Flink directory traversal attack: remote file writing through the REST API
Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit a5264a6f41524afe8ceadf1d8ddc8c80f323ebc4 from apache/flink:master.
Problem types: cwe_id: CWE-23
description: CWE-23 Relative Path Traversal
Affected products: vendor: Apache Software Foundation
product: Apache Flink
Credits: lang: en
value: 0rich1 of Ant Security FG Lab
Published: 2021-01-05T11:40:13.000Z
CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API
A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master.
Problem types: cwe_id: CWE-552
description: CWE-552 Files or Directories Accessible to External Parties
Affected products: vendor: Apache Software Foundation
product: Apache Flink
Credits: lang: en
value: 0rich1 of Ant Security FG Lab
Published: 2021-01-05T11:40:14.000Z
CVE-2020-17520 
In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verification mechanism by constructing special URLs, thereby accessing any HTTP API.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Pulsar Manager
Published: 2020-12-18T20:48:08.000Z
CVE-2020-17521 
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache Groovy
Published: 2020-12-07T19:22:37.000Z
CVE-2020-17522 
When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files include permissions that allow bad actors to push arbitrary content into and remove arbitrary content from CDN cache servers. Additionally, these permissions are potentially extended to IP addresses outside the desired range, resulting in them being granted to clients possibly outside the CDN arcitechture.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Traffic Control
Published: 2021-01-26T12:42:07.000Z
CVE-2020-17523 
Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Shiro
Published: 2021-02-03T16:55:18.000Z
CVE-2020-17525 Remote unauthenticated denial-of-service in Subversion mod_authz_svn
Subversion's mod_authz_svn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in mod_dav_svn+mod_authz_svn servers 1.14.1 and mod_dav_svn+mod_authz_svn servers 1.10.7
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: Apache Software Foundation
product: Apache Subversion
Credits: lang: en
value: Thomas Åkesson (simonsoft.se)
Published: 2021-03-17T09:20:14.000Z
CVE-2020-17526 
Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. This does not affect users who have changed the default value for `[webserver] secret_key` config.
Problem types: description: Incorrect Session Validation in Airflow Webserver with default config
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Credits: lang: en
value: Junghan Lee of Deliveryhero Korea Security Team
Published: 2020-12-21T16:45:13.000Z
CVE-2020-17527 Apache Tomcat: Request header mix-up between HTTP/2 streams
While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2020-12-03T18:30:14.000Z
CVE-2020-17528 Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length
Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets including beyond the length of the packet.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: Apache Software Foundation
product: Apache NuttX (incubating)
Credits: lang: en
value: Apache NuttX would like to thank Forescout for reporting the issue
Published: 2020-12-09T16:35:13.000Z
CVE-2020-17529 Apache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header
Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offset value specified in the IP header. This is only impacts builds with both CONFIG_EXPERIMENTAL and CONFIG_NET_TCP_REASSEMBLY build flags enabled.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: Apache Software Foundation
product: Apache NuttX (incubating)
Credits: lang: en
value: Apache NuttX would like to thank Forescout for reporting the issue
Published: 2020-12-09T16:35:14.000Z
CVE-2020-17530 
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
Problem types: description: Remote Code Execution
Affected products: vendor: Apache Software Foundation
product: Apache Struts
Published: 2020-12-11T01:11:04.000Z
CVE-2020-17531 Deserialization flaw in EOL Tapestry 4.
A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deserialization without authentication. Apache Tapestry 4 reached end of life in 2008 and no update to address this issue will be released. Apache Tapestry 5 versions are not vulnerable to this issue. Users of Apache Tapestry 4 should upgrade to the latest Apache Tapestry 5 version.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Apache Software Foundation
product: Apache Tapestry
Credits: lang: en
value: Apache Tapestry would like to thank Adrian Bravo (@adrianbravon) for reporting this issue.
Published: 2020-12-08T00:00:00.000Z
CVE-2020-17532 Apache ServiceComb Yaml remote deserialization vulnerability
When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 ~ 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache ServiceComb-Java-Chassis
Published: 2021-01-25T09:25:14.000Z
CVE-2020-17533 Apache Accumulo Improper Handling of Insufficient Permissions
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and 'canPerformSystemActions' security functions are not checked in some instances, therefore allowing an authenticated user with insufficient permissions to perform the following actions: flushing a table, shutting down Accumulo or an individual tablet server, and setting or removing system-wide Accumulo configuration properties.
Problem types: cwe_id: CWE-252
description: CWE-252 Improper Handling of Insufficient Permissions or Privileges
Affected products: vendor: Apache Software Foundation
product: Apache Accumulo
Published: 2020-12-29T11:30:13.000Z