790 matches found
MAL-2022-7325 Malicious code in yarn-design-system-choicesjs-stencil (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5dcc28be538a581cdac4d85003da4d80c8186564837c3d86f64ffae81cda6e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7329 Malicious code in yarn-design-system-rc-input-number (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af670dcb9945b741b8a4b4a71a54c4da8d08032685b0db16fdfbe7847bd66d0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yarn-design-system-rc-input-number (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af670dcb9945b741b8a4b4a71a54c4da8d08032685b0db16fdfbe7847bd66d0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yarn-design-system-rc-tooltip (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 843c6a1e32f309a04455bd199d97770cd7c13f9fc26ab137fe28dd519efd3e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7327 Malicious code in yarn-design-system-fonts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36271b16949d7666fab1ad7ffc09c9fc82404a3383c2421567ead9f1b025a988 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yarn-design-system-fonts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36271b16949d7666fab1ad7ffc09c9fc82404a3383c2421567ead9f1b025a988 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Apache Hadoop Elevation of Privilege Vulnerability (CNVD-2022-51055)
Apache Hadoop is an open source distributed systems infrastructure from the Apache Foundation. The product is capable of distributed processing of large amounts of data and is highly reliable, scalable, and fault-tolerant. an elevation of privilege vulnerability exists in Apache Hadoop, which ste...
GHSA-58JX-F5RF-QGQF User account escalation in Apache Hadoop
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher...
CVE-2021-33036
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher...
CVE-2021-33036
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher...
CVE-2021-33036: Path Traversal: '../filedir'
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher...
Malicious code in yarn-design-system-logos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7328 Malicious code in yarn-design-system-logos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2022-29202 via tensorflow (1.12.2)
tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2022-29202 Source advisory: OSV:GHSA-CWPM-F78V-7M5C...
animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2022-29197 via tensorflow (1.12.2)
tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2022-29197 Source advisory: OSV:GHSA-HRG5-737C-2P56...
animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2022-29191 via tensorflow (1.12.2)
tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2022-29191 Source advisory: OSV:GHSA-FV25-WRFF-WF86...
Improper Link Resolution Before File Access in Apache Hadoop
The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during...
GHSA-JPMF-8CJ2-595G Improper Link Resolution Before File Access in Apache Hadoop
The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during...
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications...