50 matches found
Cross site scripting
Livy server version 0.7.0-incubating only is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating...
CVE-2021-26544
Affected software: Apache Livy server 0.7.0-incubating. Issue: cross-site scripting (XSS) in the session name. Impact: a malicious user could access logs and results of other users’ sessions and run jobs with those users’ privileges. Root cause: XSS in session-name handling. Remediation: the fixe...
CVE-2021-26544 Apache Livy (Incubating) is vulnerable to cross site scripting
Livy server version 0.7.0-incubating only is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating...
CVE-2020-1939
The Apache NuttX Incubating project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereference bug. The NuttX RTOS itself is not affected. Users of the optional apps repository are affected on...
CVE-2020-1939
The CVE-2020-1939 issue affects the optional ftpd component within the Apache NuttX Apps repository, not the NuttX RTOS core. A NULL pointer dereference in ftpd is the named problem. Impact is limited to users who have enabled ftpd in versions 6.15 through 8.2. The NuttX RTOS itself is not affect...
Apache Storm Information Disclosure Vulnerability
Apache Storm is the United States Apache Apache Software Foundation, a set of open source distributed real-time computing system using Clojure concurrent programming language development. An information disclosure vulnerability exists in Apache Storm versions 0.9.1-incubating through 1.2.2. The...
Apache Oozie User Emulation Vulnerability
Apache Oozie is a workflow scheduling system for managing Apache Hadoop jobs from the U.S. Apache Apache Software Foundation. The system supports Java map-reduce, Pig, Hive and many other types of Hadoop jobs. A security vulnerability exists in Apache Oozie versions 3.1.3-incubating through 5.0.0...
Race condition
A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end o...
Apache Fineract SQL Injection Vulnerability
Apache Fineract is a set of open source digital financial services platform of the U.S. Apache Apache Software Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. A SQL injection vulnerability...
Apache Atlas Cross-Site Scripting Vulnerability (CNVD-2017-27444)
Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. A cross-site scripting vulnerability exists in the search function in Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating. A remote attacker can exploit this...
Apache Atlas Cross-Site Scripting Vulnerability (CNVD-2017-27442)
Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. A cross-site scripting vulnerability exists in the edit-tag feature in Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating. A remote attacker can exploit this...
Apache Atlas Cross-Site Scripting Vulnerability
Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. A cross-site scripting vulnerability exists in Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating. A remote attacker can exploit this vulnerability to inject...
Apache Atlas Cross-Site Scripting Vulnerability (CNVD-2017-27441)
Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. A cross-site scripting vulnerability exists in Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating. An attacker could exploit this vulnerability to execute arbitra...
PYSEC-2017-107
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality...
PYSEC-2017-111
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting...
CVE-2017-3152
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...
Cross site scripting
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality...
CVE-2017-3154
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...