Filter
Versions
Apache SparkIn Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received…
7.8
First published (updated )
Apache SparkApache Spark Command Injection Vulnerability
First published (updated )
Redhat Jboss Enterprise Application PlatformLast updated 24 July 2024
9.1
First published (updated )
Apache SparkApache Spark: Shell command injection via Spark UI
8.8
First published (updated )
Oracle Financial Services Crime And Compliance Management StudioApache Spark Key Negotiation Vulnerability
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache SparkPrior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, e…
7.5
First published (updated )
Apache SparkWhen using PySpark , it's possible for a different local user to connect to the Spark application an…
5.5
First published (updated )
Apache SparkApache Spark proxy-user privilege escalation from malicious configuration class
10
First published (updated )
Apache SparkIn Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to requi…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache SparkApache Spark XSS vulnerability in log viewer UI Javascript
5.4
First published (updated )
Apache SparkIn all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'maste…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache SparkFrom version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, i…
4.9
First published (updated )
Eclipse JettyEclipse Jetty is vulnerable to a denial of service, caused by an error when handling a request conta…
7.5
First published (updated )
Eclipse JettyEclipse Jetty could allow a remote attacker to bypass security restrictions, caused by a flaw when G…
5.8
First published (updated )