4599 matches found
CVE-2025-55039 Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks
This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...
CVE-2025-55039
CVE-2025-55039 affects Apache Spark prior to 3.4.4, 3.5.2 and 4.0.0. When spark.network.crypto.enabled is true (default false) and spark.network.crypto.cipher is not configured, Spark uses AES/CTR/NoPadding for RPC traffic, enabling encryption without authentication. A MITM could flip bits in cip...
JLSEC-2025-27 curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...
curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived...
EUVD-2019-0147
Malware in sbrugna...
EUVD-2020-0857
Malware in sbrugna...
EUVD-2020-0930
Malware in sbrugna...
EUVD-2019-0309
Malware in sbrugna...
EUVD-2019-0214
Malware in sbrugna...
EUVD-2019-0312
Malware in sbrugna...
EUVD-2019-0291
Malware in sbrugna...
EUVD-2019-0320
Malware in sbrugna...
EUVD-2019-0355
Malware in sbrugna...
EUVD-2020-0832
Malware in sbrugna...
EUVD-2017-14348
Malware in sbrugna...
EUVD-2018-20789
Malware in sbrugna...
EUVD-2020-0867
Malware in sbrugna...
EUVD-2019-0350
Malware in sbrugna...
EUVD-2019-0279
Malware in sbrugna...