Lucene search
+L

1109 matches found

Vulnrichment
Vulnrichment
•added 2024/09/18 6:32 a.m.•18 views

CVE-2024-46720 drm/amdgpu: fix dereference after null check

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...

6.9AI score0.00218EPSS
SaveExploits0References4
OSV
OSV
•added 2024/09/18 6:32 a.m.•16 views

CVE-2024-46720 drm/amdgpu: fix dereference after null check

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...

6.1AI score
SaveExploits0References8
OSV
OSV
•added 2024/06/08 3:15 p.m.•18 views

CVE-2024-35701

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PropertyHive allows Stored XSS.This issue affects PropertyHive: from n/a through 2.0.13...

5.4CVSS5.8AI score0.00261EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/05/28 3:32 a.m.•8 views

SUSE CVE-2021-47550

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpugetxgmihive, when kobjectinitandadd failed There is a potential memleak if not call kobjectput...

4.7CVSS6.5AI score0.00232EPSS
SaveExploits0References8
OSV
OSV
•added 2024/05/24 3:15 p.m.•6 views

DEBIAN-CVE-2021-47550

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpugetxgmihive, when kobjectinitandadd failed There is a potential memleak if not call kobjectput...

5.5CVSS5.1AI score0.00232EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/24 3:15 p.m.•15 views

UBUNTU-CVE-2021-47550

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpugetxgmihive, when kobjectinitandadd failed There is a potential memleak if not call kobjectput...

5.5CVSS5.9AI score0.00232EPSS
SaveExploits0References6
NVD
NVD
•added 2024/05/17 9:15 a.m.•27 views

CVE-2023-44478

Cross-Site Request Forgery CSRF vulnerability in WP Hive Events Rich Snippets for Google allows Exploitation of Trusted Credentials.This issue affects Events Rich Snippets for Google: from n/a through 1.8...

7.1CVSS6.9AI score0.00277EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/17 8:28 a.m.•34 views

CVE-2023-44478 WordPress Events Rich Snippets for Google plugin <= 1.8 - CSRF Leading to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Hive Events Rich Snippets for Google allows Exploitation of Trusted Credentials.This issue affects Events Rich Snippets for Google: from n/a through 1.8...

7.1CVSS6.9AI score0.00277EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/05/09 12:00 a.m.•17 views

Apache Hive Code Injection Vulnerability

Apache Hive is a set of data warehouse software based on Hadoop Distributed Systems Infrastructure from the Apache Apache Foundation in the United States. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. A code...

6.6CVSS7.5AI score0.01103EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/08 12:00 a.m.•19 views

PT-2024-32147

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a dereference after a null check in the drm/amdgpu component of the Linux kernel. The fix involves checking the pointer hive before use. Recommendations At the...

5.5CVSS5.5AI score0.00218EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2024/05/07 7:59 p.m.•73 views

Security Bulletin: Common Vulnerabilities in Cloudera Data Platform Private Cloud Base 7.1.9.

Summary Common vulnerabilities reported in Cloudera Data Platform Private Cloud Base 7.1.9 have been addressed, and are available in Hotfix 2. Vulnerability Details CVEID:CVE-2015-1772 DESCRIPTION: Apache Hive could allow a remote attacker to bypass security restrictions, caused by an error in th...

9CVSS9.9AI score0.53861EPSS
SaveExploits2Affected Software1
OSV
OSV
•added 2024/05/06 7:15 p.m.•12 views

CVE-2024-34381

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PropertyHive allows Stored XSS.This issue affects PropertyHive: from n/a through 2.0.10...

5.4CVSS5.8AI score0.00328EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/05/06 4:26 a.m.•28 views

Code Injection

Apache Hive is vulnerable to Code Injection. The vulnerability is caused by improper sanitization or validation of user-supplied URLs in the openBrowserWindow method within HiveJdbcBrowserClient.java, which allows an authenticated attacker to submit a malicious URL which results in command...

6.6CVSS6.8AI score0.01103EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/05/03 9:30 a.m.•61 views

GHSA-VPW3-3PRF-3974 Apache Hive Code Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver client is running. The malicious user must have...

6.6CVSS6.8AI score0.01103EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/05/03 9:30 a.m.•45 views

Apache Hive Code Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver client is running. The malicious user must have...

6.9AI score0.01103EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2024/05/03 9:15 a.m.•27 views

CVE-2023-35701

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver client is running. The malicious user must have...

6.6CVSS7.4AI score0.01103EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/03 8:11 a.m.•25 views

CVE-2023-35701 Apache Hive: Arbitrary command execution via JDBC driver

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver client is running. The malicious user must have...

6.9AI score0.01103EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/03 8:11 a.m.•37 views

CVE-2023-35701 Apache Hive: Arbitrary command execution via JDBC driver

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver client is running. The malicious user must have...

7.7AI score0.01103EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/03 8:11 a.m.•105 views

CVE-2023-35701

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver client is running. The malicious user must have...

6.9AI score0.01103EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/05/03 8:11 a.m.•10 views

CVE-2023-35701 Apache Hive: Arbitrary command execution via JDBC driver

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can potentially lead to arbitrary code execution on the machine/endpoint that the JDBC driver client is running. The malicious user must have...

6.6CVSS7.3AI score
SaveExploits0References5
Rows per page
Query Builder