Hadoop-Yarn-ResourceManager-RCE

Impatto della vulnerabilità Vi era una vulnerabilità di accesso non autorizzato in Hadoop Yarn ResourceManager. Questa vulnerabilità era presente in Hadoop Yarn, il componente principale di Hadoop. Poiché Hadoop Yarn esponeva il servizio RPC al pubblico per impostazione predefinita, un attaccante...

apache_kylin

Apache Kylin Codacy Badge Motore OLAP estremo per Big Data Apache Kylin è un motore open source di analisi distribuita, contribuito da eBay Inc., che fornisce un'interfaccia SQL e analisi multidimensionale OLAP su Hadoop, supportando set di dati estremamente grandi. Per maggiori dettagli, consult...

CVE-2019-14974

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:03+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U 2026-08-28 00:00:36+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U...

Hadoop-YARN-RCE

Nicht authentifizierte RCE im Apache Hadoop YARN ResourceManager Im Apache Hadoop YARN ResourceManager besteht eine Schwachstelle durch nicht autorisierten Zugriff , wenn seine REST-API Standardport 8088 oder RPC-Ports ohne aktivierte Authentifizierung exponiert sind. Standardmäßig lässt Hadoop...

GHSA-2326-HX7G-3M9R vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2024-41909 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

EUVD-2026-60254

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

JetBrains IntelliJ IDEA before 2026.2.1 has an XXE vulnerability in its Hadoop ResourceManager integration, allowing local file reads (CVSS 5.5, MEDIUM). Exploitation requires user interaction but no privileges. Fix: upgrade to IntelliJ IDEA 2026.2.1. No in-the-wild exploitation reported. No conn...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

PT-2026-76704

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-9193

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database...

EUVD-2026-53429

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database...

CVE-2026-9193 Privilege escalation in Progress MarkLogic Server Hadoop integration

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database...

CVE-2026-9193

The CVE concerns Progress MarkLogic Server’s Hadoop integration. Affected: MarkLogic Server versions prior to 11.3.6 and 12.0.3. Root cause: improper privilege management allows an authenticated user with a low-privileged Hadoop role to escalate privileges and perform privileged operations agains...

CVE-2026-44615 Path traversal in NotebookRepo note and folder path composition

Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker with permission to rename a note, or access to folder operations, could supply traversal segments in note or folder paths. Zeppelin composed these values into...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator, spark, kafka, zookeeper, apache-pulsar-fips, apache-camel-karavan-devmode, apache-nifi, apache-hop, apache-hop-fips, tez, apache-pulsar, zookeeper-fips, spark-kubernetes-operator-fips, hadoop-client-modules, kafka-fips, pinot-fips, pinot,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator, spark, kafka, zookeeper, apache-pulsar-fips, apache-camel-karavan-devmode, apache-nifi, apache-hop, apache-hop-fips, tez, apache-pulsar, zookeeper-fips, spark-kubernetes-operator-fips, hadoop-client-modules, kafka-fips, pinot-fips, pinot,...