CVE-2021-20078

Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS...

CVE-2021-20078

Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS...

Path traversal

Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS...

CVE-2021-20078

CVE-2021-20078 affects ManageEngine OpManager (builds below 125346). A path traversal flaw in the spark gateway component enables remote denial of service by deleting arbitrary directories on the OS. Multiple connected sources (Red Hat, CNVD, CVE registries) confirm the same description; no explo...

CVE-2021-20078

Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS...

GHSA-JGWR-3QM3-26F3 vulnerabilities

Vulnerabilities for packages: spark-compat...

Apache Livy Cross-Site Scripting Vulnerability

Apache Livy is an application server of the United States Apache Corporation . Provides support for programmatic , fault-tolerant , multi-tenant submission of Spark jobs from Web, mobile applications. A cross-site scripting vulnerability exists in Livy server version 0.7.0-incubating, which can b...

CVE-2021-25329 vulnerabilities

Vulnerabilities for packages: spark-compat...

CVE-2021-25122 vulnerabilities

Vulnerabilities for packages: spark-compat...

ae.teletronics.nlp:w2vec (=1.0), ai.catboost:catboost-spark_2.11 (>=0.25-rc1 <=0.25-rc3) +10039 more potentially affected by CVE-2020-25649 via com.fasterxml.jackson.core:jackson-databind (>=2.6.0 <=2.6.7.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.6.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.1, =0.0.1, =0.3.2, =0.3.3 and more Source cves: CVE-2020-25649 Source advisory: OSV:GHSA-288C-CQ4H-88GQ...

CVE-2021-24122 vulnerabilities

Vulnerabilities for packages: spark-compat...

CVE-2020-35200

Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS...

Ignite Realtime Openfire Cross-Site Scripting Vulnerability

Ignite Realtime Openfire is a cross-platform open source Real-Time Collaboration RTC server developed by the Ignite Realtime community in Java and based on XMPP formerly known as Jabber, Instant Messaging Protocol, which is capable of building efficient instant messaging servers and supporting te...

PT-2020-17289 · Ignite Realtime · Openfire

Name of the Vulnerable Software and Affected Versions: Ignite Realtime Openfire version 4.6.0 Description: The issue is related to a Reflective XSS in the plugins/clientcontrol/spark-form.jsp file. Recommendations: For Ignite Realtime Openfire version 4.6.0, consider restricting access to the...

CVE-2020-8564 vulnerabilities

Vulnerabilities for packages: spark-operator...

CVE-2020-8564 vulnerabilities

Vulnerabilities for packages: spark-operator...

Apache Spark Remote Code Execution (CVE-2020-9480)

A remote code execution vulnerability exists in Apache Spark. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apache Kylin Information Disclosure Vulnerability

Apache Kylin is an open source distributed analytic data warehouse from the Apache Software Foundation. The product mainly provides Hadoop/Spark on top of the SQL query interface and multi-dimensional analysis OLAP and other functions. Apache Kylin exists an information disclosure vulnerability,...

CVE-2020-9480

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

Security Bulletin: A vulnerability in IBM Java Runtime affect IBM Spectrum Conductor and IBM Spectrum Conductor with Spark

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3.0, and IBM Spectrum Conductor with Spark 2.2.1. IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum...