https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:39:06 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0512 certfr-2025-avi-0512 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0512 https://cve.radiocsirt.org/vuln/cnvd-2022-76237 cnvd-2022-76237 https://cve.radiocsirt.org/vuln/cnvd-2022-76237 https://cve.radiocsirt.org/vuln/euvd-2026-24881 EUVD-2026-24881 https://cve.radiocsirt.org/vuln/euvd-2026-24881 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25642 <p>ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used.</p> <p>ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25642 https://cve.radiocsirt.org/vuln/ghsa-rr2m-gffv-mgrj <p><strong>Affected:</strong> Maven: org.apache.hadoop:hadoop-yarn-server</p> <p>ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used.</p> <p><strong>Affected:</strong> Maven: org.apache.hadoop:hadoop-yarn-server</p> <p>ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used.</p> https://cve.radiocsirt.org/vuln/ghsa-rr2m-gffv-mgrj https://cve.radiocsirt.org/vuln/gsd-2021-25642 gsd-2021-25642 https://cve.radiocsirt.org/vuln/gsd-2021-25642 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794