rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-13891 
An issue was discovered in Mattermost Mobile Apps before 1.31.2 on iOS. Unintended third-party servers could sometimes obtain authorization tokens, aka MMSA-2020-0022.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-26T16:14:29.000Z
CVE-2020-13892 
The SportsPress plugin before 2.7.2 for WordPress allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-09T17:40:32.000Z
CVE-2020-13893 
Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or HTML via multiple parameters through Unicode Transformations (Best-fit Mapping), as demonstrated by the full-width variants of the less-than sign (%EF%BC%9C) and greater-than sign (%EF%BC%9E).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-18T18:55:24.000Z
CVE-2020-13894 
handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-07T00:33:54.000Z
CVE-2020-13895 
Crypt::Perl::ECDSA in the Crypt::Perl (aka p5-Crypt-Perl) module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 (prime256v1). This could conceivably have a security-relevant impact if an attacker wishes to use public r and s values when guessing whether signature verification will fail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-07T00:56:57.000Z
CVE-2020-13896 
The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remote attackers to obtain sensitive information via the form/formDeviceVerGet URI, such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime. This is similar to CVE-2019-1653.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T17:11:36.000Z
CVE-2020-13897 
HESK before 3.1.10 allows reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-07T01:18:58.000Z
CVE-2020-13898 
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T21:03:32.000Z
CVE-2020-13899 
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T21:05:17.000Z
CVE-2020-13900 
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T21:07:34.000Z
CVE-2020-13901 
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T21:09:35.000Z
CVE-2020-13902 
ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-07T17:06:04.000Z
CVE-2020-13904 
FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-07T18:07:08.000Z
CVE-2020-13905 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T18:27:08.000Z
CVE-2020-13906 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-10T18:29:48.000Z
CVE-2020-13909 
The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-07T19:26:47.000Z
CVE-2020-13910 
Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-07T19:36:33.000Z
CVE-2020-13911 
Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-09T18:11:32.000Z
CVE-2020-13912 
SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-07T20:13:37.000Z
CVE-2020-13913 
An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T14:46:02.000Z
CVE-2020-13914 
webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service (Segmentation fault) to the webserver via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T14:46:06.000Z
CVE-2020-13915 
Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T14:46:12.000Z
CVE-2020-13916 
A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T14:46:16.000Z
CVE-2020-13917 
rkscli in Ruckus Wireless Unleashed through 200.7.10.92 allows a remote attacker to achieve command injection and jailbreak the CLI via a crafted CLI command. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T14:46:21.000Z
CVE-2020-13918 
Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information (that can be used for a jailbreak) via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T14:46:26.000Z
CVE-2020-13919 
emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command injection via a crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-28T14:46:30.000Z
CVE-2020-13920 
Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to proxy the original, and bound that, he effectively becomes a man in the middle and is able to intercept the credentials when an user connects. Upgrade to Apache ActiveMQ 5.15.12.
Problem types: description: Man In The Middle attack vulnerability
Affected products: vendor: n/a
product: Apache ActiveMQ
Published: 2020-09-10T00:00:00.000Z
CVE-2020-13921 
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: Apache SkyWalking
Published: 2020-08-05T13:25:14.000Z
CVE-2020-13922 Apache DolphinScheduler (incubating) Permission vulnerability
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.
Problem types: cwe_id: CWE-264
description: CWE-264 Permissions, Privileges, and Access Controls
Affected products: vendor: Apache Software Foundation
product: Apache DolphinScheduler
Credits: lang: en
value: This issue was discovered by xuxiang of DtDream security
Published: 2021-01-11T09:40:19.000Z
CVE-2020-13923 
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04
Problem types: description: IDOR Vulnerability
Affected products: vendor: n/a
product: Apache OFBiz
Published: 2020-07-15T15:38:13.000Z
CVE-2020-13924 
In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download files.
Problem types: description: directory traversal
Affected products: vendor: Apache Software Foundation
product: Apache Ambari
Credits: lang: en
value: threedr3am
Published: 2021-03-17T09:05:19.000Z
CVE-2020-13925 
Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all previous versions after 2.3 should upgrade to 3.1.0.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Apache Kylin
Published: 2020-07-14T12:47:46.000Z
CVE-2020-13926 
Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0 should upgrade to 3.1.0.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: Apache Kylin
Published: 2020-07-14T12:50:48.000Z
CVE-2020-13927 
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at https://airflow.apache.org/docs/1.10.11/security.html#api-authentication. Note this change fixes it for new installs but existing users need to change their config to default `[api]auth_backend = airflow.api.auth.backend.deny_all` as mentioned in the Updating Guide: https://github.com/apache/airflow/blob/1.10.11/UPDATING.md#experimental-api-will-deny-all-request-by-default
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Airflow
Published: 2020-11-10T00:00:00.000Z
CVE-2020-13928 
Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.
Problem types: description: Apache Atlas Multiple XSS Vulnerability
Affected products: vendor: n/a
product: Apache Atlas
Published: 2020-09-16T17:38:38.000Z
CVE-2020-13929 Notebook permissions bypass
Authentication bypass vulnerability in Apache Zeppelin allows an attacker to bypass Zeppelin authentication mechanism to act as another user. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
Problem types: description: authentication bypass
Affected products: vendor: Apache Software Foundation
product: Apache Zeppelin
Credits: lang: en
value: Apache Zeppelin would like to thank David Woodhouse for reporting this issue
Published: 2021-09-02T00:00:00.000Z
CVE-2020-13931 
If Apache TomEE 8.0.0-M1 - 8.0.3, 7.1.0 - 7.1.3, 7.0.0-M1 - 7.0.8, 1.0.0 - 1.7.5 is configured to use the embedded ActiveMQ broker, and the broker config is misconfigured, a JMX port is opened on TCP port 1099, which does not include authentication. CVE-2020-11969 previously addressed the creation of the JMX management interface, however the incomplete fix did not cover this edge case.
Problem types: description: Undesired port open with unauthenticated access
Affected products: vendor: n/a
product: Apache TomEE
Published: 2020-12-17T23:42:39.000Z
CVE-2020-13932 
In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into the admin console's browser. The XSS payload is triggered in the diagram plugin; queue node and the info section.
Problem types: description: Remote XSS in Web console Diagram Plugin
Affected products: vendor: n/a
product: Apache ActiveMQ Artemis
Published: 2020-07-20T21:08:34.000Z
CVE-2020-13933 
Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Shiro
Published: 2020-08-17T20:19:53.000Z
CVE-2020-13934 
An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Apache Tomcat
Published: 2020-07-14T14:59:11.000Z
CVE-2020-13935 
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Apache Tomcat
Published: 2020-07-14T15:00:21.000Z
CVE-2020-13936 Velocity Sandbox Bypass
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.
Problem types: description: Velocity Sandbox Bypass
Affected products: vendor: Apache Software Foundation
product: Apache Velocity Engine
Credits: lang: en
value: This issue was discovered by Alvaro Munoz pwntester@github.com of Github Security Labs and was originally reported as GHSL-2020-048.
Published: 2021-03-10T08:00:19.000Z
CVE-2020-13937 
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Kylin
Published: 2020-10-19T20:33:18.000Z
CVE-2020-13938 Improper Handling of Insufficient Privileges
Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows
Problem types: description: Improper Handling of Insufficient Privileges
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: Discovered by Ivan Zhakov
Published: 2021-06-10T07:10:20.000Z
CVE-2020-13940 
In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider objects allowed trusted administrators to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE).
Problem types: description: Information disclosure by XXE
Affected products: vendor: n/a
product: Apache NiFi
Published: 2020-10-01T19:55:16.000Z
CVE-2020-13941 
Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Solr
Published: 2020-08-17T12:16:37.000Z
CVE-2020-13942 Remote Code Execution in Apache Unomi
It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was found. In Apache Unomi version 1.5.2 scripts are now completely filtered from the input. It is highly recommended to upgrade to the latest available version of the 1.5.x release to fix this problem.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache Unomi
Published: 2020-11-24T18:00:16.000Z
CVE-2020-13943 
If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Tomcat
Published: 2020-10-12T13:46:47.000Z
CVE-2020-13944 
In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Apache Airflow
Published: 2020-09-17T14:01:40.000Z
CVE-2020-13945 
In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.
Problem types: description: Admin API default access token vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache APISIX
Published: 2020-12-07T19:04:52.000Z
CVE-2020-13946 
In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.
Problem types: description: Insufficiently Protected Credentials
Affected products: vendor: n/a
product: Apache Cassandra
Published: 2020-09-01T20:49:32.000Z
CVE-2020-13947 
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.
Problem types: description: XSS
Affected products: vendor: n/a
product: Apache ActiveMQ
Published: 2021-02-08T21:25:27.000Z
CVE-2020-13948 
While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s `os` package in the web application process in versions < 0.37.1. It was thus possible for an authenticated user to list and access files, environment variables, and process information. Additionally it was possible to set environment variables for the current process, create and update files in folders writable by the web process, and execute arbitrary programs accessible by the web process. All other operations available to the `os` package in Python were also available, even if not explicitly enumerated in this CVE.
Problem types: description: Remote Code Execution Vulnerability
Affected products: vendor: n/a
product: Apache Superset
Published: 2020-09-17T12:31:11.000Z
CVE-2020-13949 
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.
Problem types: description: Potential DoS when processing untrusted Thrift payloads
Affected products: vendor: n/a
product: Apache Thrift
Published: 2021-02-12T19:39:09.000Z
CVE-2020-13950 mod_proxy_http NULL pointer dereference
Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service
Problem types: description: mod_proxy_http NULL pointer dereference
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: Reported by Marc Stern (<marc.stern approach.be>)
Published: 2021-06-10T07:10:21.000Z
CVE-2020-13951 
Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Apache OpenMeetings
Published: 2020-09-30T17:22:51.000Z