1494 matches found
Cross site scripting
The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
CVE-2019-12370
The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
CVE-2019-12370
The provided connected records confirm that CVE-2019-12370 affects the Spark Android app up to version 2.0.2, enabling XSS via an event attribute and arbitrary file loading through a src attribute when READ_EXTERNAL_STORAGE permission is granted. The root cause and exact vulnerable component are ...
PT-2020-9307
Name of the Vulnerable Software and Affected Versions Spark application versions 2.0.2 and earlier Description The issue allows for cross-site scripting XSS via an event attribute and arbitrary file loading via a src attribute, provided the application has the READ EXTERNAL STORAGE permission...
CVE-2019-12370: Improper Neutralization of Input During Web Page Generation
The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...
GHSA-QXF4-CHVG-4R8R vulnerabilities
Vulnerabilities for packages: spark-compat...
Apache Spark Unauthenticated Remote Code Execution (CVE-2018-11770)
A remote code execution vulnerability exists in Apache Spark. Successful exploitation of this vulnerability could result in arbitrary code execution...
CVE-2020-1938 vulnerabilities
Vulnerabilities for packages: spark-compat...
The vulnerability of the PySpark interface of the Apache Spark framework, which allows attackers to escalate their privileges
The vulnerability of the PySpark framework of Apache Spark is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Apache Spark framework, related to deficiencies in the authentication process, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Apache Spark framework is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
GHSA-HH3J-X4MC-G48R vulnerabilities
Vulnerabilities for packages: spark-compat...
GHSA-9XCJ-C8CR-8C3C vulnerabilities
Vulnerabilities for packages: spark-compat...
CVE-2019-12418 vulnerabilities
Vulnerabilities for packages: spark-compat...
CVE-2019-17563 vulnerabilities
Vulnerabilities for packages: spark-compat...
Security Bulletin: Multiple Vulnerabilities in Apache Spark affects IBM Watson Studio Local
Summary Security Bulletin: Multiple Vulnerabilities in Apache Spark affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2018-11804 DESCRIPTION: Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. ...
CVE-2019-10172 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2019-15417
The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app versionCode=7, versionName=7.0.5 that allows unauthorized dynamic code...
Code injection
The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app versionCode=7, versionName=7.0.5 that allows unauthorized dynamic code...
CVE-2019-15417
The Tecno Spark Pro Android device with a build fingerprint of TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app versionCode=7, versionName=7.0.5 that allows unauthorized dynamic code...
CVE-2019-15417
The CVE-2019-15417 entry concerns a Tecno Spark Pro Android device (build TECNO/H3722/TECNO-K8:7.0/NRD90M/K8-H3722ABCDE-N-171229V96:user/release-keys) with a pre-installed app, com.lovelyfont.defcontainer (versionCode 7, versionName 7.0.5), that allows unauthorized dynamic code loading via a conf...