Lucene search
K

12 matches found

OSV
OSV
added 2026/03/03 12:31 p.m.4 views

GHSA-C87W-642H-M97H Apache Ranger has a Code Injection vulnerability

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions = 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue...

9.8CVSS6AI score0.01244EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2026/03/03 12:31 p.m.9 views

Apache Ranger has a Code Injection vulnerability

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions = 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue...

9.8CVSS6AI score0.01244EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2026/03/03 11:16 a.m.8 views

CVE-2025-59059

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions = 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue...

9.8CVSS0.01244EPSS
Exploits1References2
CVE
CVE
added 2026/03/03 10:44 a.m.366 views

CVE-2025-59059

Apache Ranger CVE-2025-59059 is a remote code execution issue affecting Ranger versions

9.8CVSS6AI score0.01244EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/03 10:44 a.m.4 views

CVE-2025-59059

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions = 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue...

9.8CVSS6AI score0.01244EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/03/03 10:44 a.m.24 views

CVE-2025-59059 Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions = 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue...

0.01244EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/03 10:44 a.m.6 views

CVE-2025-59059 Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions = 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue...

6AI score0.01244EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2018-17191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script...

9.8CVSS8.9AI score0.07755EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/05/29 7:30 a.m.34 views

CVE-2021-30181 Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection)

Apache Dubbo prior to 2.6.9 and 2.7.9 supports Script routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these rules, Dubbo customers use ScriptEngine and run...

9.7AI score0.61463EPSS
Exploits0References1
NVD
NVD
added 2018/12/31 2:29 p.m.18 views

CVE-2018-17191

Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...

9.8CVSS9.8AI score0.07755EPSS
Exploits0References2
Prion
Prion
added 2018/12/31 2:29 p.m.16 views

Remote code execution

Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...

7.5CVSS9.7AI score0.07755EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2018/12/31 2:29 p.m.25 views

CVE-2018-17191

Apache NetBeans incubating 9.0 NetBeans Proxy Auto-Configuration PAC interpretation is vulnerable for remote command execution RCE. Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent...

9.8CVSS7.6AI score0.07755EPSS
Exploits0References3
Rows per page
Query Builder