Lucene search
+L

36 matches found

Chainguard
Chainguard
added 2024/06/20 5:15 p.m.14 views

CVE-2024-28397 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kubeflow-pipelines-visualization-server...

5.3CVSS6.6AI score0.04548EPSS
SaveExploits22
Chainguard
Chainguard
added 2024/05/20 9:15 p.m.16 views

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, airflow, jwt-tool, apache-beam-python-3.11-sdk, py3-cassandra-medusa, checkov, kubeflow-volumes-web-app, confluent-docker-utils, superset, kubeflow-jupyter-web-app, nvidia-nsight-compute-13.1, kubeflow-pipelines,...

5.6CVSS6.1AI score0.0034EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/07/31 12:00 a.m.7 views

Fedora: Security Advisory for golang-github-apache-beam-2 (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/30 1:55 a.m.20 views

[SECURITY] Fedora 36 Update: golang-github-apache-beam-2-2.33.0~RC1-8.fc36

Apache Beam is a unified model for defining both batch and streaming data-parallel processing pipelines, as well as a set of language-specific SDKs for constructing pipelines and Runners for executing them on distributed processing backends, including Apache Flink, Apache Spark, Google Cloud...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/07/18 12:00 a.m.21 views

Fedora: Security Advisory for golang-github-apache-beam-2 (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS9.1AI score0.04195EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/07/17 1:15 a.m.38 views

[SECURITY] Fedora 35 Update: golang-github-apache-beam-2-2.33.0~RC1-7.fc35

Apache Beam is a unified model for defining both batch and streaming data-parallel processing pipelines, as well as a set of language-specific SDKs for constructing pipelines and Runners for executing them on distributed processing backends, including Apache Flink, Apache Spark, Google Cloud...

9.3CVSS8.4AI score0.0995EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2022/07/06 12:00 a.m.11 views

Fedora: Security Advisory for golang-github-apache-beam-2 (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/04 1:35 a.m.28 views

[SECURITY] Fedora 36 Update: golang-github-apache-beam-2-2.33.0~RC1-7.fc36

Apache Beam is a unified model for defining both batch and streaming data-parallel processing pipelines, as well as a set of language-specific SDKs for constructing pipelines and Runners for executing them on distributed processing backends, including Apache Flink, Apache Spark, Google Cloud...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
Github Security Blog
Github Security Blog
added 2020/05/06 8:49 p.m.82 views

Improper Certificate Validation in Apache Beam

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5CVSS2.4AI score0.01025EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/05/06 8:49 p.m.29 views

GHSA-2M7G-9Q74-9M3Q Improper Certificate Validation in Apache Beam

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5CVSS7.5AI score0.01025EPSS
SaveExploits0References4
Veracode
Veracode
added 2020/01/16 3:31 a.m.23 views

Insecure TLS Configuration

Apache Beam MongoDB connector uses insecure TLS configurations. The option to disable SSL trust verification is not properly handled and causes the trust verification to be disabled in all cases. This allows a remote attacker to perform man-in-the-middle attacks against the server...

7.5CVSS3AI score0.01025EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2020/01/15 7:15 p.m.18 views

CVE-2020-1929

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5CVSS7.5AI score0.01025EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/15 7:15 p.m.16 views

CVE-2020-1929

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5CVSS7AI score
SaveExploits0References1
Prion
Prion
added 2020/01/15 7:15 p.m.23 views

Code injection

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

5CVSS7.5AI score0.01025EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/01/15 6:56 p.m.25 views

CVE-2020-1929

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5AI score0.01025EPSS
SaveExploits0References1
CVE
CVE
added 2020/01/15 6:56 p.m.100 views

CVE-2020-1929

The CVE-2020-1929 entry concerns the Apache Beam MongoDB connector. Affected versions 2.10.0–2.16.0 expose an option to disable SSL trust verification, but the configuration is not respected and disables trust verification in all cases. This exclusion is registered globally, affecting any code ru...

7.5CVSS7.5AI score0.01025EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder