https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:09:16 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-952 certfr-2022-avi-952 https://cve.radiocsirt.org/vuln/certfr-2022-avi-952 https://cve.radiocsirt.org/vuln/cnvd-2022-51055 cnvd-2022-51055 https://cve.radiocsirt.org/vuln/cnvd-2022-51055 https://cve.radiocsirt.org/vuln/euvd-2026-28260 EUVD-2026-28260 https://cve.radiocsirt.org/vuln/euvd-2026-28260 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33036 <p>In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.</p> <p>In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-33036 https://cve.radiocsirt.org/vuln/ghsa-58jx-f5rf-qgqf <p><strong>Affected:</strong> Maven: org.apache.hadoop:hadoop-yarn-server-common</p> <p>In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.</p> <p><strong>Affected:</strong> Maven: org.apache.hadoop:hadoop-yarn-server-common</p> <p>In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.</p> https://cve.radiocsirt.org/vuln/ghsa-58jx-f5rf-qgqf https://cve.radiocsirt.org/vuln/gsd-2021-33036 gsd-2021-33036 https://cve.radiocsirt.org/vuln/gsd-2021-33036 https://cve.radiocsirt.org/vuln/oesa-2022-2016 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: hadoop, openEuler:20.03-LTS-SP3: hadoop, openEuler:22.03-LTS: hadoop</p> <p>Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fix(es): In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.(CVE-2021-33036)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: hadoop, openEuler:20.03-LTS-SP3: hadoop, openEuler:22.03-LTS: hadoop</p> <p>Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fix(es): In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.(CVE-2021-33036)</p> https://cve.radiocsirt.org/vuln/oesa-2022-2016 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794 <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0794