747 matches found
GHSA-3MC7-4Q67-W48M vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-3MC7-4Q67-W48M vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0...
CVE-2022-25857 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0...
CVE-2022-25857 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
Cassandra Web File Read Vulnerability
This module exploits an unauthenticated directory traversal vulnerability in Cassandra Web 'Cassandra Web' version 0.5.0 and earlier, allowing arbitrary file read with the web server privileges. This vulnerability occurred due to the disabled Rack::Protection module Module Options msf use...
com.datastax.oss.quarkus:cassandra-quarkus-client (=1.0.0), com.datastax.oss.quarkus:cassandra-quarkus-client-deployment (>=1.0.0 <=1.1.1) +45 more potentially affected by CVE-2021-3914 via io.smallrye:smallrye-health-ui (>=2.2.3 <=3.1.1)
io.smallrye:smallrye-health-ui MAVEN version =2.2.3, =1.0.0, =1.0.4, =0.4.0, =1.2.3.Final, =1.2.3.Final, =1.2.3.Final, =1.3.0.Beta1, =1.2.3.Final, =1.2.3.Final, =1.2.3.Final, =1.2.1.Final, =1.2.2.Final and more Source cves: CVE-2021-3914 Source advisory: OSV:GHSA-PVC3-WVXR-7CMF...
Metasploit Weekly Wrap-Up
Putting in the work! This week we’re extra grateful for the fantastic contributions our community makes to Metasploit. The Metasploit team landed more than 5 PRs each from Ron Bowes and bcoles, adding some great new capabilities. Ron Bowes contributed four new modules targeting UnRAR, Zimbra, and...
ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8), ai.chronon:aggregator_2.12 (>=0.0.25 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +1301 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=3.0.0 <=3.2.2)
org.apache.hadoop:hadoop-common MAVEN version =3.0.0, =1.0.1, =0.0.25, =0.0.25, =0.0.62, =0.0.25, =0.0.86, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.34.0.3-1-3.1, =0.0.3, =1.0.0, =1.4.0, =1.5.0 and more Source cves: CVE-2021-37404 Source advisory: OSV:GHSA-RMPJ-7C96-MRG8...
com.erudika:para-cache-hazelcast (>=1.26.0 <=1.40.1), com.erudika:para-client (>=1.13 <=1.45.10) +9 more potentially affected by CVE-2022-1848 via com.erudika:para-core (>=1.13 <=1.45.9)
com.erudika:para-core MAVEN version =1.13, =1.26.0, =1.13, =1.20.0, =1.18.0, =1.28.1, =1.30.0, =1.25.0, =1.29.0, =1.28.0, =1.13, =1.24.4, =1.45.10 Source cves: CVE-2022-1848 Source advisory: OSV:GHSA-4793-8WWH-JXXR...
com.savoirtech:cassandra-all (=1.5.4) potentially affected by CVE-2015-0225 via org.apache.cassandra:apache-cassandra (=1.2.6)
org.apache.cassandra:apache-cassandra MAVEN version =1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:apache-cassandra and may be impacted: - com.savoirtech:cassandra-all =1.5.4 Source cves: CVE-2015-0225 Source advisory:...
Improper Neutralization of Special Elements used in a Command in Apache Cassandra
The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request...
GHSA-W7F2-GJXF-2GM9 Improper Neutralization of Special Elements used in a Command in Apache Cassandra
The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request...
GHSA-52GQ-7J6C-XW6X Missing Authentication for Critical Function in Apache Cassandra
The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...
Missing Authentication for Critical Function in Apache Cassandra
The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in...
GHSA-9H6P-92JQ-888X vulnerabilities
Vulnerabilities for packages: cassandra-reaper...
The vulnerability of the distributed database management system Apache Cassandra, related to improper code generation, allows a hacker to execute arbitrary code on the host.
The vulnerability of the distributed database management system Apache Cassandra is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host remotely...
Spring Tips: Brave, Bold, and Boring YugabyteDB
Hi, Spring fans! In this installment we dare to be boring with YugabyteDB, a distributed database that just works. Its a database that feels like PostgreSQL but scales like Apache Cassandra...
Apache Cassandra Remote Code Execution (CVE-2021-44521)
A remote code execution vulnerability exists in Apache Cassandra. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
