Hadoop-Yarn-ResourceManager-RCE

Влияние уязвимости Существовала уязвимость несанкционированного доступа в Hadoop yarn ResourceManager. Эта уязвимость присутствовала в Hadoop yarn — основном компоненте Hadoop. Поскольку Hadoop yarn по умолчанию открывал службу RPC для всех, удалённый злоумышленник мог воспользоваться этой...

apache_kylin

Apache Kylin Codacy Badge Экстремальный OLAP-движок для больших данных Apache Kylin — это открытый распределенный аналитический движок, предоставленный компанией eBay Inc., который обеспечивает SQL-интерфейс и многомерный анализ OLAP в Hadoop для работы с чрезвычайно большими наборами данных...

Hadoop-YARN-RCE

Unauthenticated RCE in Apache Hadoop YARN ResourceManager An unauthorized access vulnerability exists in Apache Hadoop YARN ResourceManager when its REST API default port 8088 or RPC ports are exposed without authentication enabled. By default, Hadoop leaves HTTP web consoles and RPC services...

CVE-2026-73334 Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt Parquet files via an envelope encryption mechanism that wraps encrypts data keys via a Key Management Service KMS. On the reader side, the...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through FileKeyUnwrapper in parquet-hadoop/src/main/java/org/apache/parquet/crypto/keytools/FileKeyUnwrapper.java. An attacker can make a reader send its KMS access token to an attacker-controlled host b...

CVE-2014-0114 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-668Q-QRV7-99FM vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2024-31573 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2021-42550 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-CHFM-68VV-PVW5 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-VMFG-RJJM-RJRJ vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2017-5929 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-P66X-2CV9-QQ3V vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2019-14974

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:03+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U 2026-08-28 00:00:36+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U...

GHSA-2326-HX7G-3M9R vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2024-41909 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

EUVD-2026-60254

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

JetBrains IntelliJ IDEA before 2026.2.1 has an XXE vulnerability in its Hadoop ResourceManager integration, allowing local file reads (CVSS 5.5, MEDIUM). Exploitation requires user interaction but no privileges. Fix: upgrade to IntelliJ IDEA 2026.2.1. No in-the-wild exploitation reported. No conn...