1156 matches found
CVE-2025-62728
A SQL injection vulnerability exists in the Hive Metastore Server (HMS) when processing delete column statistics requests via the Thrift APIs . This flaw, identified as CWE-89 , is only exploitable by authorized users or applications with direct access to the Thrift APIs. The vulnerability affect...
EUVD-2025-199715
SQL injection vulnerability in Hive Metastore Server HMS when processing delete column statistics requests via the Thrift APIs. The vulnerability is only exploitable by trusted/authorized users/applications that are allowed to call directly the Thrift APIs. In most real-world deployments, HMS is...
Apache Hive SQL注入漏洞
Apache Hive is a set of data warehouse software based on Hadoop Distributed Systems Infrastructure from the Apache Apache Foundation in the United States. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. Apache Hive...
PT-2025-48132
Name of the Vulnerable Software and Affected Versions Apache Hive versions 4.1.0 through 4.2.0 Description A SQL injection issue exists in the Hive Metastore Server HMS when handling delete column statistics requests through the Thrift APIs. This issue is exploitable only by authorized users or...
CVE-2025-62728: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Hive Metastore Server HMS when processing delete column statistics requests via the Thrift APIs. The vulnerability is only exploitable by trusted/authorized users/applications that are allowed to call directly the Thrift APIs. In most real-world deployments, HMS is...
CVE-2025-66087
Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through = 2.1.12...
CVE-2025-66087 WordPress PropertyHive plugin <= 2.1.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through = 2.1.12...
CVE-2025-10702
Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990037)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990037 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpugetxgmihive, when kobjectinitandadd faile...
EUVD-2018-0737
Malware in sbrugna...
EUVD-2020-0560
Malware in sbrugna...
EUVD-2018-0782
Malware in sbrugna...
EUVD-2010-0268
Malware in sbrugna...
EUVD-2018-0764
Malware in sbrugna...
EUVD-2016-0779
Malware in sbrugna...
EUVD-2018-0760
Malware in sbrugna...
EUVD-2018-0758
Malware in sbrugna...
EUVD-2019-0371
Malware in sbrugna...