https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:02:17 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-928 certfr-2022-avi-928 https://cve.radiocsirt.org/vuln/certfr-2022-avi-928 https://cve.radiocsirt.org/vuln/cnvd-2022-55648 cnvd-2022-55648 https://cve.radiocsirt.org/vuln/cnvd-2022-55648 https://cve.radiocsirt.org/vuln/euvd-2026-28843 EUVD-2026-28843 https://cve.radiocsirt.org/vuln/euvd-2026-28843 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34538 <p>Apache Hive before 3.1.3 &#34;CREATE&#34; and &#34;DROP&#34; function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious.</p> <p>Apache Hive before 3.1.3 &#34;CREATE&#34; and &#34;DROP&#34; function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-34538 https://cve.radiocsirt.org/vuln/ghsa-v3p8-j597-3xg8 <p><strong>Affected:</strong> Maven: org.apache.hive:hive</p> <p>Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious.</p> <p><strong>Affected:</strong> Maven: org.apache.hive:hive</p> <p>Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious.</p> https://cve.radiocsirt.org/vuln/ghsa-v3p8-j597-3xg8 https://cve.radiocsirt.org/vuln/gsd-2021-34538 gsd-2021-34538 https://cve.radiocsirt.org/vuln/gsd-2021-34538 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1301 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM InfoSphere Information Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM InfoSphere Information Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1301