Hadoop-YARN-RCE

RCE no autenticado en Apache Hadoop YARN ResourceManager Existe una vulnerabilidad de acceso no autorizado en Apache Hadoop YARN ResourceManager cuando su API REST puerto predeterminado 8088 o los puertos RPC están expuestos sin autenticación habilitada. De forma predeterminada, Hadoop deja las...

Hadoop-Yarn-ResourceManager-RCE

Impacto de la vulnerabilidad Había una vulnerabilidad de acceso no autorizado en Hadoop yarn ResourceManager. Esta vulnerabilidad existía en Hadoop yarn, el componente central de Hadoop. Debido a que Hadoop yarn abría el servicio RPC al público de forma predeterminada, un atacante remoto podía...

CVE-2026-73334 Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt Parquet files via an envelope encryption mechanism that wraps encrypts data keys via a Key Management Service KMS. On the reader side, the...

apache_kylin

Apache Kylin Codacy Badge 大数据极致OLAP引擎 Apache Kylin 是一个开源的分布式分析引擎，由 eBay Inc. 贡献，提供 SQL 接口和在 Hadoop 上的多维分析（OLAP），支持超大规模数据集。 更多详情，请访问官网 http://kylin.apache.org。 文档 请参考 http://kylin.apache.org/docs/。 获取帮助 最快从开发者处获得回复的方式是发送邮件至我们的邮件列表 [email protected]， 并记得通过 [email protected] 订阅我们的邮件列表。 许可证...

CVE-2024-31573 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-668Q-QRV7-99FM vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2014-0114 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2021-42550 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-CHFM-68VV-PVW5 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-VMFG-RJJM-RJRJ vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2017-5929 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-P66X-2CV9-QQ3V vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2019-14974

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:03+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U 2026-08-28 00:00:36+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U...

GHSA-2326-HX7G-3M9R vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2024-41909 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

EUVD-2026-60254

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

JetBrains IntelliJ IDEA before 2026.2.1 has an XXE vulnerability in its Hadoop ResourceManager integration, allowing local file reads (CVSS 5.5, MEDIUM). Exploitation requires user interaction but no privileges. Fix: upgrade to IntelliJ IDEA 2026.2.1. No in-the-wild exploitation reported. No conn...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...