974 matches found
EUVD-2026-64855
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...
CVE-2026-21751
HCL Hive is affected by a cryptographic primitive with a risky implementation , which could allow an attacker to achieve unauthorized lateral compromise or widespread credential leakage if a single internal component is breached. The vulnerability is rated CVSS 3.1 7.4 (HIGH) with a network attac...
CVE-2026-21751 HCL Hive is affected by use of a cryptographic primitive with a risky implementation
HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...
CVE-2026-21759
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...
EUVD-2026-64840
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerability that could allow an authenticated or unauthorized user to introduce unverified, malicious, or broken code directly into production environments . The CVSS 3.1 score is 7.2 (HIGH) , with a vector requiring high privileges (PR:H), networ...
CVE-2026-21756 HCL Hive is affected by a broken access control vulnerability
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...
CVE-2026-21759
HCL Hive is affected by an information exposure vulnerability in which Swagger API documentation was publicly accessible to unauthenticated users. No sensitive data (credentials, PII) was discovered, but the exposure increases the overall attack surface by revealing API structure to potential att...
EUVD-2026-64837
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...
CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fixed the issue of unexpected dereferencing of the hive. Check whether the amdgpuhiveinfo hive might be NULL...
PT-2026-80900
HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...
PT-2026-80903
HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws...
CVE-2026-66800
A flaw was found in cluster-backup-operator. A namespace administrator with privileges in the open-cluster-management-backup namespace can exploit a feature in the Restore Custom Resource CR. By setting the cleanupBeforeRestore field to CleanupAll, an attacker can trigger an unguarded, cluster-wi...
CVE-2026-65321 PyAthena SQL Injection via DefaultParameterFormatter DELETE/CTAS
PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format, which routes DELETE and CTAS statements to the escapehive function that backslash-escapes single...
CLEANSTART-2026-IS96483 Security fixes in apache-hive 4.0.0-r1
Package apache-hive version 4.0.0-r1 fixes 27 vulnerabilities: CVE-2024-47561, CVE-2024-7254, CVE-2024-47554, CVE-2022-41881, CVE-2023-34462...
CLEANSTART-2026-WS59157 Security fixes in apache-hive 4.0.1-r2
Package apache-hive version 4.0.1-r2 fixes 8 vulnerabilities: CVE-2026-41417, CVE-2026-40490, CVE-2026-42583, CVE-2026-42579, CVE-2026-42586...