CVE-2025-47410

Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their Geode session credentials to submit malicious commands on the target system on behalf of the authenticated user. This...

EUVD-2022-0653

Malicious code in bioql PyPI...

EUVD-2022-6916

Malicious code in bioql PyPI...

EUVD-2022-6726

Malicious code in bioql PyPI...

EUVD-2022-3292

Malicious code in bioql PyPI...

EUVD-2022-5357

Malicious code in bioql PyPI...

CVE-2017-15694

When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster...

The vulnerability of the JMX data management platform of Apache Geode allows an attacker to execute arbitrary code.

The vulnerability of the JMX data management platform of Apache Geode involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10 <=2.0.2), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10 <=6.0.2) +71 more potentially affected by CVE-2017-12622 via org.apache.geode:geode-core (>=1.10.0 <=1.2.1)

org.apache.geode:geode-core MAVEN version =1.10.0, =0.10, =0.10, =2.0.0, =0.1.9, =2.4.0, =1.22.0, =1.14.0, =1.10.0, =1.10.0, =1.10.0, =1.12.0, =1.11.0, =1.15.4 and more Source cves: CVE-2017-12622 Source advisory: OSV:GHSA-H22R-H77W-2G5F...

com.antgroup.tugraph:calcite-geode (>=1.18.0-geaflow_1.0 <=1.18.0-geaflow_1.1), com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10 <=2.0.2) +81 more potentially affected by CVE-2017-15694 via org.apache.geode:geode-core (>=1.0.0-incubating <=1.8.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating, =1.18.0-geaflow1.0, =0.10, =0.10, =1.1.0, =1.0-M3, =1.21.0.138, =0.3.12, =0.3.5, =0.1.9, =2.2.0, =1.0.0, =1.1.0 - io.pivotal.services.dataTx:gemfire-extensions-spring-security =1.0.0 and more Source cves: CVE-2017-15694 Source advisory:...