444 matches found
PT-2026-66502
Name of the Vulnerable Software and Affected Versions Apache Zeppelin versions 0.6.0 through 0.12.0 Description A Cross-Site Request Forgery CSRF issue exists due to a default CORS Cross-Origin Resource Sharing configuration that permits cross-origin state-changing requests and accepts text/plain...
PT-2026-66504
LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of...
CVE-2021-27578
Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0...
CVE-2024-41169
The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's resources, including directories and files. This issue affects Apache Zeppelin: from 0.10.1 up to 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue by removin...
CVE-2024-41177
Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue...
EUVD-2021-1977
Malware in sbrugna...
EUVD-2019-0415
Malware in sbrugna...
EUVD-2021-2014
Malware in sbrugna...
EUVD-2019-0414
Malware in sbrugna...
EUVD-2021-2094
Malware in sbrugna...
EUVD-2019-0431
Malware in sbrugna...
EUVD-2024-1201
Malicious code in bioql PyPI...
EUVD-2024-1200
Malicious code in bioql PyPI...
EUVD-2023-2065
Malicious code in bioql PyPI...
EUVD-2024-54778
Malicious code in bioql PyPI...
EUVD-2024-1153
Malicious code in bioql PyPI...
EUVD-2024-1270
Malicious code in bioql PyPI...
EUVD-2024-1284
Malicious code in bioql PyPI...