Apache Hive and Apache Spark security vulnerabilities

Apache Hive and Apache Spark are both products of the Apache Foundation, USA.Apache Hive is a suite of data warehouse software based on Hadoop Distributed Systems Infrastructure. The software provides a data integration approach and a high-level query language to support large-scale data analysis...

Schneider Electric PLC Software Input Error

The vulnerability of the microprogrammed software of Schneider Electric’s programmable logic controllers PLC models M241, M251, M258, and LMC058 is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to trigger maintenance failures and compromise the...

Apache Airflow Information Disclosure

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Apache Airflow lies in the exposure of information in debugging messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

ROS-20241203-14

Squid proxy server vulnerability is related to errors in input data processing. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service by sending specially crafted ESI packets. specially crafted ESI packets...

Lorex 2K Indoor Wi-Fi Security Camera security vulnerabilities

Lorex 2K Indoor Wi-Fi Security Camera is a series of security cameras from Lorex Canada. A security vulnerability previously existed in the Lorex 2K Indoor Wi-Fi Security Camera version 2.800.0000000.8.R.20241111. An unauthenticated attacker exploiting this vulnerability could trigger a stack-bas...

PandasAI Command Injection Vulnerability

PandasAI is a data processing application that combines Pandas, a data manipulation and analysis library, with AI, allowing users to interact with data through natural language without having to write complex code. PandasAI has a command injection vulnerability that can be exploited by an attacke...

Ivanti Connect Secure Code Execution

The vulnerability of the Ivanti Connect Secure previously Pulse Connect Secure and Ivanti Policy Secure access controls lies in the improper processing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

Intel Neural Compressor Privilege Escalation

The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

NVIDIA BlueField License Issue Vulnerability

NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField suffers from an authorization issue vulnerability that stems from mishandling of privileges, which can be exploited by an attacker to cause a denial of service, data tampering, and information disclosure...

QuRouter OS Code Execution

The vulnerability of the QuRouter operating system for QNAP network devices is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-38405

Transient DOS while processing the CU information from RNR IE...

CVE-2024-0106

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit DPU contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information...

CVE-2024-0106: Improper Handling of Insufficient Privileges

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit DPU contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information...

Rockwell Automation CIP Message Handler DoS

The vulnerability of the CIP Message Handler component in Rockwell Automation’s programmable logic controllers ControlLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, and FactoryTalk Logix Echo is related to errors in processing input...

Security Bulletin: IBM Master Data Management may provide weaker than expected security due to OpenSSL through a carry propogation flaw (CVE-2021-4160)

Summary IBM Master Data Management v11.6, and v12.0 are vulnerable to a carry propogation flaw found in OpenSSL. OpenSSL could provide weaker than expected security, caused by a carry propagation flaw in the MIPS32 and MIPS64 squaring procedure. An attacker could exploit this vulnerability to...

CVE-2024-45842

Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests...

IBM Watson Studio Local Cross-Site Request Forgery Vulnerability

IBM Watson Studio Local is a suite of collaborative data processing solutions from International Business Machines IBM. The product includes features such as data analysis, data visualization, data cleansing and streaming data extraction. A cross-site request forgery vulnerability exists in IBM...

CVE-2024-8925 Erroneous parsing of multipart form data

In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to...

PT-2024-7255 · Abb · Abb Ac 800M

Name of the Vulnerable Software and Affected Versions: ABB AC 800M affected versions not specified Description: The issue is related to errors in processing input data in the ABB AC 800M controller firmware. It allows a remote attacker to execute arbitrary commands by sending specially crafted MM...

ROS-20241004-09

Vulnerability of the matchflags function of the Netfilter subsystem of the Linux kernel is related to the reading of data outside of buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information or cause a denial of...