0x.plugin.bom:zero-x-plugin-bom (>=0.0.10 <=1.1.0), RPD:bmc-rpd (=1.1) +17734 more potentially affected by CVE-2021-35516 via org.apache.commons:commons-compress (>=1.0 <=1.20)

org.apache.commons:commons-compress MAVEN version =1.0, =0.0.10, =0.0.4, =1.0.6, =1.0.6, =0.0.25, =0.0.25, =0.6.0, =0.5.0, =0.9.0, =0.5.0, =0.6.0, =0.11.0, =0.12.0 and more Source cves: CVE-2021-35516 Source advisory: OSV:GHSA-CRV7-7245-F45F...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Conductor with Spark

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ versions, specifically Version 8 Service Refresh 5 Fix Pack 10 and earlier releases used by IBM Spectrum Conductor with Spark 2.2.0 and 2.2.1. These issues were disclosed as part of the IBM Java SDK updates in April 2018...

Unauthorized Access Vulnerability in Apache Spark

Apache Spark is a fast, general-purpose compute engine designed for large-scale data processing. An unauthorized access vulnerability exists in Apache Spark, which can be exploited by an attacker to gain unauthorized access to sensitive information and perform unauthorized operations...

ai.tock:bot-test (>=20.9.3 <=21.9.2), ai.tock:bot-test-base (>=20.9.3 <=21.9.2) +1431 more potentially affected by CVE-2021-27568 via net.minidev:json-smart (>=1.0.6.3 <=1.3.1)

net.minidev:json-smart MAVEN version =1.0.6.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =20.9.3, =0.0.13, =1.13.3, =1.15.0 - bio.ferlab:datalake-spark302.12 =0.2.39 and more Source cves: CVE-2021-27568 Source advisory: OSV:GHSA-V528-7HRM-F...

GHSA-J39C-C8HJ-X4J3 vulnerabilities

Vulnerabilities for packages: spark-compat...

Check Point Response to Wi-Fi FragAttacks in Quantum Spark appliances

Cause Several CVEs were published on Wi-Fi devices under the name FragAttacks. More information about them can be found at: https://www.fragattacks.com/ The list of new CVEs related to wireless security flaws with fragmented and aggregated frames, is relevant to Check Point Quantum Spark wireless...

Spark Information Disclosure Vulnerability (CNVD-2021-37593)

Spark is a public domain FHIR server developed using C. A security vulnerability exists in versions prior to Firely/Incendi Spark 1.5.5-r4, which stems from the lack of a Content-Disposition header in some cases, which could result in carefully crafted files being delivered to the client to be...

CVE-2021-32054

Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered to clients such that they are rendered directly in a victim's web browser...

CVE-2021-32054

Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered to clients such that they are rendered directly in a victim's web browser...

Design/Logic Flaw

Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered to clients such that they are rendered directly in a victim's web browser...

CVE-2021-32054

Firely/Incendi Spark before 1.5.5-r4 is affected by a lack of Content-Disposition headers in certain responses, which may cause crafted files to render directly in a victim’s browser. Root cause: missing Content-Disposition headers in some responses. Affected versions: prior to 1.5.5-r4. Mitigati...

CVE-2021-32054

Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered to clients such that they are rendered directly in a victim's web browser...

Firely/Incendi Spark 安全漏洞

Spark is a public domain FHIR server developed using C. A security vulnerability exists in versions prior to Firely/Incendi Spark 1.5.5-r4, which stems from the lack of a Content-Disposition header in some cases, which could result in carefully crafted files being delivered to the client to be...

GHSA-2RVV-W9R2-RG7M vulnerabilities

Vulnerabilities for packages: spark-compat...

How Akamai Employees Showed Up for Akamai Earth Month

Photo from an Akamai employee who took her bike out to enjoy nature during Akamai Earth Month. Akamai employees across the globe showed up in full force for Akamai Earth Month 2021 -- our campaign to help employees take small actions at home and in their community to make a difference for the...

com.datastax.spark:kafka-streaming_2.10 (>=1.1.0-beta2 <=1.1.0-rc3), com.datastax.spark:simple-demos_2.10 (>=1.1.0-beta2 <=1.1.0-rc3) +14 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=2.1.0 <=2.1.11)

org.apache.cassandra:cassandra-all MAVEN version =2.1.0, =1.1.0-beta2, =1.1.0-beta2, =1.1.0-alpha2, =1.1.0-alpha2, =0.80, =0.1.0, =2.1.10.0, =2.11.0, =0.6.2, =0.3.1, =0.3.1, =0.2.6, =0.2.6, =0.2.7 and more Source cves: CVE-2020-13946 Source advisory: OSV:GHSA-24WW-MC5X-XC43...

Oracle Business Intelligence Publisher Multiple Vulnerabilities (Apr 2021 CPU)

The version of Oracle Business Intelligence Publisher or Oracle Analytics Server 5.5 running on the remote host is 11.1.1.9.x prior to 11.1.1.9.210215, 12.2.1.3.x prior to 12.2.1.3.210405, 12.2.1.4.x prior to 12.2.1.4.210402, or 12.2.5.5.x OAS 5.5 prior to 12.2.5.5.210331. It is, therefore,...

ai.catboost:catboost-spark_3.0_2.12 (>=0.25 <=1.2.8), ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8) +3360 more potentially affected by CVE-2021-28168 via org.glassfish.jersey.core:jersey-common (>=2.28 <=2.33)

org.glassfish.jersey.core:jersey-common MAVEN version =2.28, =0.25, =1.0.1, =0.0.25, =0.0.25, =0.0.62, =0.0.25, =0.0.86, =thread-pool-0.0.24-dev, =0.0.6, =0.0.12, =0.0.1, =3.34.0.3-1-3.0, =0.0.3, =0.0.3, =0.0.8 and more Source cves: CVE-2021-28168 Source advisory: OSV:GHSA-C43Q-5HPJ-4CRV...

ai.catboost:catboost-spark_4.0_2.13 (=1.2.10), ai.catboost:catboost-spark_4.1_2.13 (=1.2.10) +813 more potentially affected by CVE-2021-28168 via org.glassfish.jersey.core:jersey-common (>=3.0.0 <=3.0.18)

org.glassfish.jersey.core:jersey-common MAVEN version =3.0.0, =21.1.0, =21.1.0, =2.0.14-spark-4.0, =4.43.0, =4.48.0, =2.0.0, =2.0.0, =2.0.2 and more Source cves: CVE-2021-28168 Source advisory: OSV:GHSA-C43Q-5HPJ-4CRV...

CVE-2021-20078

Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS...