com.expediagroup:drone-fly-app (>=1.0.9, <=1.0.10), org.apache.hive:hive-beeline (>=4.0.0-alpha-1, <=4.2.0) +3 more potentially affected by CVE-2026-49845 via org.apache.hive:hive-standalone-metastore-server (>=4.0.0-alpha-1, <=4.2.0)

org.apache.hive:hive-standalone-metastore-server MAVEN version =4.0.0-alpha-1, =1.0.9, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-49845 Source advisory: SNYK:JAVA-ORGAPACHEHIVE-19256918...

com.expediagroup:drone-fly-app (>=1.0.9, <=1.0.10), org.apache.hive:hive-beeline (>=4.0.0-alpha-1, <=4.2.0) +3 more potentially affected by CVE-2026-49845 via org.apache.hive:hive-standalone-metastore-server (>=4.0.0-alpha-1, <=4.2.0)

org.apache.hive:hive-standalone-metastore-server MAVEN version =4.0.0-alpha-1, =1.0.9, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-49845 Source advisory: MEND:CVE-2026-49845...

Apache Airflow Hive Provider Beeline remote code execution with Principal

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Apache Hive Provider: before 6.1.1.Before version 6.1.1 it waspossible to bypass the security check to RCE viaprincipal parameter. For this to beexploited it requir...

PYSEC-2026-273 Apache Airflow Hive Provider Beeline remote code execution with Principal

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1. Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it...

com.expediagroup:drone-fly-app (>=1.0.9, <=1.0.10), com.github.hiwepy:pac4j-biz (1.0.2.release) +20 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.5.5)

org.pac4j:pac4j-core MAVEN version 4.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.expediagroup:drone-fly-app =1.0.9, =1.0.3.release, =1.0.2.release, =4.0.0-alpha-2, =4.0.0-alpha-2, =4.0.0-alpha-2,...

CVE-2020-12246

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...

org.apache.hive.hcatalog:hive-hcatalog-core (4.1.0), org.apache.hive.hcatalog:hive-hcatalog-pig-adapter (4.1.0) +10 more potentially affected by CVE-2025-62728 via org.apache.hive:hive-metastore (4.1.0)

org.apache.hive:hive-metastore MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-metastore and may be impacted: - org.apache.hive.hcatalog:hive-hcatalog-core 4.1.0 -...

EUVD-2020-4560

Malware in sbrugna...

EUVD-2021-28453

Malicious code in bioql PyPI...

EUVD-2021-28454

Malicious code in bioql PyPI...

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

org.apache.hive.hcatalog:hive-webhcat (>=4.0.0-alpha-1, <=4.0.0-beta-1), org.apache.hive:hive-beeline (>=4.0.0-alpha-1, <=4.0.0-alpha-2) +2 more potentially affected by CVE-2023-35701 via org.apache.hive:hive-jdbc (>=4.0.0-alpha-1, <=4.0.0-beta-1)

org.apache.hive:hive-jdbc MAVEN version =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-beta-1 - org.apache.hop:hop-databases-hive 2.2.0 Source cves: CVE-2023-35701 Source advisory: GHSA-VPW3-3PRF-3974...

Apache Airflow Hive Provider Beeline remote code execution with Principal

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1. Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it...

CVE-2023-28706 Apache Airflow Hive Provider Beeline Remote Command Execution

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0...

CVE-2023-25696 Apache Airflow Hive Provider Beeline RCE

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

CVE-2023-25696 Apache Airflow Hive Provider Beeline RCE

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

krasnodar.beeline.ru.net Cross Site Scripting vulnerability OBB-2541454

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...