CVE-2019-12370

The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...

EUVD-2019-4005

Malware in sbrugna...

EUVD-2015-6245

Malware in sbrugna...

EUVD-2019-0111

Malware in sbrugna...

Cross site scripting

The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...

PYSEC-2019-169

When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...

Privilege Escalation

PySpark is vulnerable to privilege escalation. A local user is able to connect to the spark application and impersonate the user running the Spark application...