Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003286 advisory. In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service NULL pointer dereference and BUG because a required mute...

EUVD-2003-0634

Malware in sbrugna...

EUVD-2018-0816

Malware in sbrugna...

EUVD-2005-0186

Malware in sbrugna...

EUVD-2022-3152

Malicious code in bioql PyPI...

EUVD-2022-4410

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-18216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service NULL pointer dereference and BUG because a required...

Privilege Escalation

org.apache.hadoop, hadoop-yarn-server-nodemanager is vulnerable to Privilege Escalation. The vulnerability is caused by making the rpath of container-executor binary of Apache Hadoop configurable from $ORIGIN/ to $ORIGIN/:../lib/native/. This is the path through which .so files are loaded. This c...

YARN NodeManager Unauthorized Access

The vulnerability of the YARN NodeManager component in Apache Hadoop distributed development and execution platforms is related to registration data management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to arbitrary passwords...

SUSE CVE-2017-18216

In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service NULL pointer dereference and BUG because a required mutex is not used...

Improper Link Resolution Before File Access in Apache Hadoop

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during...

GHSA-JPMF-8CJ2-595G Improper Link Resolution Before File Access in Apache Hadoop

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during...

com.github.mlk:assortmentofjunitrules (1.0), io.cdap.cdap:cdap-data-streams3_2.12 (>=6.5.0, <=6.8.3) +14 more potentially affected by CVE-2016-3086 via org.apache.hadoop:hadoop-yarn-server-nodemanager (>=2.6.0, <=2.6.4)

org.apache.hadoop:hadoop-yarn-server-nodemanager MAVEN version =2.6.0, =6.5.0, =1.8.0, =2.6.0, =1.0.0, =1.2.1, =1.2.1, =1.0.0, =1.0.0, =1.3.5 and more Source cves: CVE-2016-3086 Source advisory: GHSA-895M-WW55-59VW...

com.github.mlk:assortmentofjunitrules (1.0), io.cdap.cdap:cdap-data-streams3_2.12 (>=6.5.0, <=6.8.3) +14 more potentially affected by CVE-2016-3086 via org.apache.hadoop:hadoop-yarn-server-nodemanager (>=2.6.0, <=2.6.4)

org.apache.hadoop:hadoop-yarn-server-nodemanager MAVEN version =2.6.0, =6.5.0, =1.8.0, =2.6.0, =1.0.0, =1.2.1, =1.2.1, =1.0.0, =1.0.0, =1.3.5 and more Source cves: CVE-2016-3086 Source advisory: OSV:GHSA-895M-WW55-59VW...

com.amazon.emr:emr-dynamodb-hadoop (>=4.2.0, <=4.3.0), com.amazon.emr:emr-dynamodb-tools (4.2.0) +150 more potentially affected by CVE-2016-3086 via org.apache.hadoop:hadoop-yarn-server-nodemanager (>=2.7.0, <=2.7.2)

org.apache.hadoop:hadoop-yarn-server-nodemanager MAVEN version =2.7.0, =4.2.0, =1.0.4, =1.0.4, =1.2.0, =1.0.2, =1.0.2, =1.2.1, =10.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =1.2.0 - com.intropro.prairie:hbase-unit 1.2.0 and more Source cves: CVE-2016-3086 Source advisory: GHSA-895M-WW55-59VW...

com.amazon.emr:emr-dynamodb-hadoop (>=4.2.0, <=4.3.0), com.amazon.emr:emr-dynamodb-tools (4.2.0) +150 more potentially affected by CVE-2016-3086 via org.apache.hadoop:hadoop-yarn-server-nodemanager (>=2.7.0, <=2.7.2)

org.apache.hadoop:hadoop-yarn-server-nodemanager MAVEN version =2.7.0, =4.2.0, =1.0.4, =1.0.4, =1.2.0, =1.0.2, =1.0.2, =1.2.1, =10.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =1.2.0 - com.intropro.prairie:hbase-unit 1.2.0 and more Source cves: CVE-2016-3086 Source advisory: OSV:GHSA-895M-WW55-59...

Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop

The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications...

VulnCheck KEV: CVE-2017-15718

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications...

YARN NodeManager Component Introduces Malicious Code

The vulnerability of the YARN NodeManager component in Apache Hadoop distributed development and execution platforms exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions...

GHSA-MQ8P-H798-XCRP Exposure of Sensitive Information in Hadoop

The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications...