938 matches found
CVE-2026-106449 vulnerabilities
Vulnerabilities for packages: opensearch-fips, pinot, traccar, apache-hop, hono, apache-hop-fips, flink-kubernetes-operator, solr, automq-fips, kafka-fips, confluent-kafka-jre-bcfips, kafbat-ui, automq, solr-fips, elasticsearch-fips, knative-kafka-broker, kafbat-ui-fips, apache-pulsar,...
GHSA-343H-94H5-C4WR vulnerabilities
Vulnerabilities for packages: opensearch-fips, pinot, traccar, apache-hop, hono, apache-hop-fips, flink-kubernetes-operator, solr, automq-fips, kafka-fips, confluent-kafka-jre-bcfips, kafbat-ui, automq, solr-fips, elasticsearch-fips, knative-kafka-broker, kafbat-ui-fips, apache-pulsar,...
apache_kylin
Apache Kylin Codacy Badge Motor OLAP extremo para Big Data Apache Kylin es un motor de análisis distribuido de código abierto, contribuido por eBay Inc., que proporciona interfaz SQL y análisis multidimensional OLAP en Hadoop, admitiendo conjuntos de datos extremadamente grandes. Para más detalle...
Hadoop-Yarn-ResourceManager-RCE
Impacto de la vulnerabilidad Había una vulnerabilidad de acceso no autorizado en Hadoop yarn ResourceManager. Esta vulnerabilidad existía en Hadoop yarn, el componente central de Hadoop. Debido a que Hadoop yarn abría el servicio RPC al público de forma predeterminada, un atacante remoto podía...
Hadoop-YARN-RCE
Unauthenticated RCE in Apache Hadoop YARN ResourceManager An unauthorized access vulnerability exists in Apache Hadoop YARN ResourceManager when its REST API default port 8088 or RPC ports are exposed without authentication enabled. By default, Hadoop leaves HTTP web consoles and RPC services...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through FileKeyUnwrapper in parquet-hadoop/src/main/java/org/apache/parquet/crypto/keytools/FileKeyUnwrapper.java. An attacker can make a reader send its KMS access token to an attacker-controlled host b...
CVE-2026-73334 Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation
Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt Parquet files via an envelope encryption mechanism that wraps encrypts data keys via a Key Management Service KMS. On the reader side, the...
CVE-2017-5929 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2024-31573 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-668Q-QRV7-99FM vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-CHFM-68VV-PVW5 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2014-0114 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2021-42550 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-P66X-2CV9-QQ3V vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-VMFG-RJJM-RJRJ vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2019-14974
creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:03+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U 2026-08-28 00:00:36+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U...
CVE-2024-41909 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-2326-HX7G-3M9R vulnerabilities
Vulnerabilities for packages: hadoop-fips...
