Command Execution Vulnerability in Apache Flink Web Dashboard

Apache Flink is another emerging framework in the Big Data space. It is the use of streaming processing to simulate batch processing , and therefore can provide sub-second , consistent with Exactly-once semantics of real-time processing capabilities . A command execution vulnerability exists in...

com.hotels:beeju (=4.0.1), com.mydataharbor:jdbc-hive-2.2.x-plugin (>=1.1.1 <=2.0.2) +45 more potentially affected by CVE-2018-1315 via org.apache.hive:hive-service (>=2.1.0 <=2.3.2)

org.apache.hive:hive-service MAVEN version =2.1.0, =1.1.1, =1.1.0, =5.1.0, =1.15.4, =0.9.1, =0.8.4, =0.8.3, =0.8.3, =0.8.3, =0.8.3, =1.2.0, =2.0.1, =1.2.0, =3.0.6 and more Source cves: CVE-2018-1315 Source advisory: OSV:GHSA-P639-XXV5-J383...

CVE-2017-17730

DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flinkadd.php...

Desdev DedeCMS SQL Injection Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. A SQL injection vulnerability exis...

Information Disclosure Via Checkpoint Directory Permission

flink-runtime is vulnerable to information disclosure. The vulnerability can happen because it creates checkpoint directory without specified permission, allowing another user to delete or read files under it. Therefore it can cause restore failure or information disclosure...

Man-in-the-Middle (MitM)

flink-mesos is susceptible to man-in-the-middle attacks. The attack is possible because it does not use canonical hostname verification in SSL validation for client-to-server connections...

DEDECMS 5.7 友情链接flink-add.php XSS

No description provided by source...