Lucene search
K

12 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-8035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC = 2.2.2 which runs in the user...

6.1CVSS6.5AI score0.03617EPSS
Exploits0References2
Veracode
Veracode
added 2023/04/06 3:6 p.m.19 views

Command Injection

Apache UIMA DUCC is vulnerable to Command Injection. The vulnerability exists when using Distributed UIMA Cluster Computing module which allows an attacker to inject and execute arbitrary commands...

8.8CVSS8.7AI score0.01616EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2023/04/03 12:0 a.m.12 views

Apache UIMA DUCC Command Injection Vulnerability

Apache UIMA DUCC is a cluster management system from the Apache Apache Foundation in the United States. The system provides tools, management and scheduling tools. Apache UIMA DUCC suffers from a command injection vulnerability that arises from improper neutralization of specific elements used wh...

8.8CVSS8.8AI score0.01616EPSS
Exploits0References1
Prion
Prion
added 2023/03/30 10:15 a.m.12 views

Command injection

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache UIMA DUCC. When using the "Distributed UIMA Cluster Computing" DUCC module of Apache UIMA, an authenticated user that has the permissions ...

6.5CVSS8.8AI score0.01616EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/03/30 12:0 a.m.3 views

Apache UIMA DUCC 命令注入漏洞

Apache UIMA DUCC is a cluster management system from the Apache Apache Foundation in the United States. The system provides tools, management and scheduling tools. Apache UIMA DUCC suffers from a command injection vulnerability that arises from improper neutralization of specific elements used wh...

8.8CVSS7.6AI score0.01616EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/03/30 12:0 a.m.2 views

PT-2023-22046 · Apache · Apache Uima Ducc

Name of the Vulnerable Software and Affected Versions: Apache UIMA DUCC affected versions not specified Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a 'Command Injection' vulnerability. When using the Distributed UIMA Cluster...

8.8CVSS6.9AI score0.01616EPSS
Exploits0References8
OSV
OSV
added 2019/05/01 9:29 p.m.10 views

CVE-2018-8035

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC = 2.2.2 which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code...

6.1CVSS7.1AI score
Exploits0References3
NVD
NVD
added 2019/05/01 9:29 p.m.21 views

CVE-2018-8035

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC = 2.2.2 which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code...

6.1CVSS6.2AI score0.03617EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2019/05/01 9:29 p.m.32 views

CVE-2018-8035

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC = 2.2.2 which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code...

6.1CVSS6.5AI score0.03617EPSS
Exploits0References2
CVE
CVE
added 2019/05/01 8:16 p.m.82 views

CVE-2018-8035

This CVE concerns Apache UIMA DUCC (

6.1CVSS6.1AI score0.03617EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/05/01 8:16 p.m.21 views

CVE-2018-8035

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC = 2.2.2 which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code...

6.2AI score0.03617EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2019/05/01 12:0 a.m.4 views

PT-2019-11143 · Apache · Apache Uima Ducc

Name of the Vulnerable Software and Affected Versions: Apache UIMA DUCC versions 2.2.2 and earlier Description: The issue arises from insufficient filtering of user-supplied inputs in the javascript code of Apache UIMA DUCC, potentially leading to the unintended execution of user-supplied...

6.1CVSS6.3AI score0.03617EPSS
Exploits0References10
Rows per page
Query Builder