80236 matches found
CLEANSTART-2026-VM68422 JMSSink in all versions of Log4j 1
Security vulnerability affects the apache-hive package. JMSSink in all versions of Log4j 1...
CLEANSTART-2026-GO41173 Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly
Security vulnerability affects the apache-hive package. Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly...
CLEANSTART-2026-DN30065 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
Security vulnerability affects the apache-hive package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...
CLEANSTART-2026-EJ90650 Included in Log4j 1
Security vulnerability affects the apache-hive package. Included in Log4j 1...
CLEANSTART-2026-QY70985 CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw
Security vulnerability affects the apache-hive package. CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw...
CLEANSTART-2026-TG12161 Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity
Security vulnerability affects the apache-hive package. Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity...
CLEANSTART-2026-IJ91953 GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer
Security vulnerability affects the apache-hive package. GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer...
CLEANSTART-2026-CB62266 By design, the JDBCAppender in Log4j 1
Security vulnerability affects the apache-hive package. By design, the JDBCAppender in Log4j 1...
CLEANSTART-2026-FS95827 JMSAppender in Log4j 1
Security vulnerability affects the apache-hive package. JMSAppender in Log4j 1...
CLEANSTART-2026-FQ60259 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings
Security vulnerability affects the apache-hive package. Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings...
CLEANSTART-2026-NO09997 Use of Arrays
Security vulnerability affects the apache-hive package. Use of Arrays...
CLEANSTART-2026-PY40890 In verifyHostName of OkHostnameVerifier
Security vulnerability affects the apache-hive package. In verifyHostName of OkHostnameVerifier...
CLEANSTART-2026-JU40621 attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container
Security vulnerability affects the apache-hive package. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container...
CLEANSTART-2026-HH95708 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
Security vulnerability affects the apache-hive package. Improper validation of certificate with host mismatch in Apache Log4j SMTP appender...
CLEANSTART-2026-WR59127 Apache Xerces2 Java Parser before 2
Security vulnerability affects the apache-hive package. Apache Xerces2 Java Parser before 2...
CLEANSTART-2026-QA75834 Out-of-bounds memory operations in org
Security vulnerability affects the apache-hive package. Out-of-bounds memory operations in org...
CLEANSTART-2026-PZ72315 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CLEANSTART-2026-HR57844 There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads
Security vulnerability affects the apache-hive package. There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads...