Filter
Versions
Apache SparkApache Spark: Shell command injection via Spark UI
8.8
First published (updated )
Apache SparkApache Spark proxy-user privilege escalation from malicious configuration class
10
First published (updated )
Apache SparkApache Spark XSS vulnerability in log viewer UI Javascript
5.4
First published (updated )
Apache SparkApache Spark Command Injection Vulnerability
First published (updated )
Oracle Financial Services Crime And Compliance Management StudioApache Spark Key Negotiation Vulnerability
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Eclipse JettyEclipse Jetty is vulnerable to a denial of service, caused by an error when handling a request conta…
7.5
First published (updated )
Eclipse JettyEclipse Jetty could allow a remote attacker to bypass security restrictions, caused by a flaw when G…
5.8
First published (updated )
Apache SparkIn Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to requi…
9.8
First published (updated )
Redhat Jboss Enterprise Application PlatformLast updated 24 July 2024
9.1
First published (updated )
Apache SparkPrior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, e…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache SparkWhen using PySpark , it's possible for a different local user to connect to the Spark application an…
5.5
First published (updated )
Apache SparkIn all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'maste…
9.8
First published (updated )
Apache SparkFrom version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, i…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache SparkIn Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received…
7.8
First published (updated )