Lucene search
+L

160 matches found

OSV
OSV
added 2023/01/17 6:56 p.m.9 views

GSD-2023-1001242 netfilter: ipset: Rework long task execution when adding/deleting entries

netfilter: ipset: Rework long task execution when adding/deleting entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

7.3AI score
SaveExploits0
OSV
OSV
added 2023/01/17 6:19 p.m.14 views

GSD-2023-1000876 netfilter: ipset: Rework long task execution when adding/deleting entries

netfilter: ipset: Rework long task execution when adding/deleting entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

7.3AI score
SaveExploits0
OSV
OSV
added 2023/01/17 5:37 p.m.12 views

GSD-2023-1000403 netfilter: ipset: Rework long task execution when adding/deleting entries

netfilter: ipset: Rework long task execution when adding/deleting entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2022/11/25 12:0 a.m.72 views

Apache Airflow OS Command Injection Vulnerability (CNVD-2022-83588)

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform features scalable and dynamic monitoring. Apache Airflow is vulnerable to an operating system command injection vulnerability, which stems from an improper...

7.8CVSS3.4AI score0.01753EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/11/24 12:0 a.m.82 views

Apache Airflow OS Command Injection Vulnerability (CNVD-2022-83589)

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform features scalable and dynamic monitoring. Apache Airflow suffers from an operating system command injection vulnerability that stems from an improper neutralization ...

9.8CVSS3.2AI score0.03944EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/11/23 9:21 a.m.26 views

OS Command Injection

apacheairflowprovidersapachepig is vulnerable to os command injection. The vulnerability in due to the application allowing an attacker to control commands executed in the task execution context, allowing an attacker to inject and execute arbitrary OS commands...

9.8CVSS9.7AI score0.03944EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/11/22 12:30 p.m.47 views

OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airfl...

9.8CVSS9.1AI score0.03228EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/11/22 12:30 p.m.45 views

GHSA-RMF2-PWFQ-H75J OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider...

9.8CVSS9.7AI score0.03944EPSS
SaveExploits0References4
OSV
OSV
added 2022/11/22 12:30 p.m.26 views

GHSA-45R6-J3CC-6MXX OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider...

5.5CVSS5.4AI score0.01383EPSS
SaveExploits0References4
NVD
NVD
added 2022/11/22 10:15 a.m.21 views

CVE-2022-38649

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airfl...

9.8CVSS0.03228EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/22 10:15 a.m.30 views

Command injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider...

7.5CVSS9.7AI score0.03944EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2022/11/22 10:15 a.m.28 views

Command injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airfl...

7.5CVSS9.7AI score0.03228EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2022/11/22 12:0 a.m.8 views

Apache Airflow 操作系统命令注入漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is characterized by scalability and dynamic monitoring. A security vulnerability exists in Apache Airflow Spark Provider versions prior to 4.0.0...

5.5CVSS6.2AI score0.01383EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/11/22 12:0 a.m.7 views

Apache Airflow 操作系统命令注入漏洞

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform features scalable and dynamic monitoring. Apache Airflow is vulnerable to an operating system command injection vulnerability, which stems from an improper...

7.8CVSS8.1AI score0.01753EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/11/22 12:0 a.m.6 views

CVE-2022-41131 Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.9AI score0.01753EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/11/22 12:0 a.m.41 views

CVE-2022-41131 Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

8.2AI score0.01753EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/22 12:0 a.m.25 views

CVE-2022-38649 Apache Airflow Pinot provider allowed Command Injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airfl...

9.8CVSS7.3AI score
SaveExploits0References4
OSV
OSV
added 2022/11/22 12:0 a.m.23 views

CVE-2022-41131 Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.8CVSS7.3AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/28 12:0 a.m.9 views

XXL-JOB 操作系统命令注入漏洞

XXL-JOB is a distributed task scheduling platform based on java language from XU Xueli XXL-JOB community. XXL-JOB version 2.2.0 suffers from an operating system command injection vulnerability, which stems from a command execution vulnerability in a background task...

9.8CVSS8.5AI score0.01314EPSS
SaveExploits1References2
Fedora
Fedora
added 2021/11/04 1:24 a.m.51 views

[SECURITY] Fedora 33 Update: ansible-2.9.27-1.fc33

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

5.5CVSS6.2AI score0.0039EPSS
SaveExploits0
Rows per page
Query Builder