Hadoop-Yarn-ResourceManager-RCE

Vuln Impact There was an unauthorized access vulnerability in Hadoop yarn ResourceManager. This vulnerability existed in Hadoop yarn, the core component of Hadoop. Because Hadoop yarn opened the RPC service to the public by default, a remote attacker could take advantage of this unauthorized...

apache_kylin

Apache Kylin Codacy Badge Extreme OLAP Engine for Big Data Apache Kylin is an open source Distributed Analytics Engine, contributed by eBay Inc., provides SQL interface and multi-dimensional analysis OLAP on Hadoop supporting extremely large datasets. For more details, see the website...

Hadoop-YARN-RCE

Apache Hadoop YARN ResourceManager의 인증되지 않은 RCE Apache Hadoop YARN ResourceManager의 REST API기본 포트 8088 또는 RPC 포트가 인증이 활성화되지 않은 채 노출되면 무단 접근 취약점 이 존재합니다. 기본적으로 Hadoop은 HTTP 웹 콘솔과 RPC 서비스를 보안 설정 없이 유지합니다. 이로 인해 공격자는 원격으로 임의 코드를 실행하거나 클러스터 리소스를 탈취할 수 있습니다. 영향 클러스터 노드에서의 원격 명령 실행. 리소스 탈취예: 암호화폐 채굴,...

CVE-2026-73334 Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt Parquet files via an envelope encryption mechanism that wraps encrypts data keys via a Key Management Service KMS. On the reader side, the...

GHSA-668Q-QRV7-99FM vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2014-0114 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2024-31573 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-CHFM-68VV-PVW5 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2021-42550 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-VMFG-RJJM-RJRJ vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2017-5929 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-P66X-2CV9-QQ3V vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2019-14974

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:03+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U 2026-08-28 00:00:36+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U...

GHSA-2326-HX7G-3M9R vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2024-41909 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

EUVD-2026-60254

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

CVE-2026-75055

JetBrains IntelliJ IDEA before 2026.2.1 has an XXE vulnerability in its Hadoop ResourceManager integration, allowing local file reads (CVSS 5.5, MEDIUM). Exploitation requires user interaction but no privileges. Fix: upgrade to IntelliJ IDEA 2026.2.1. No in-the-wild exploitation reported. No conn...

CVE-2026-75055

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...