https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:04:16 +0000 https://cve.radiocsirt.org/vuln/cnvd-2024-49152 cnvd-2024-49152 https://cve.radiocsirt.org/vuln/cnvd-2024-49152 https://cve.radiocsirt.org/vuln/euvd-2026-206188 EUVD-2026-206188 https://cve.radiocsirt.org/vuln/euvd-2026-206188 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41137 <p>Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution (RCE) since it allows the deserialization of arbitrary data.</p> <p>In real deployments, the vulnerability can be exploited only by authenticated users/clients that were able to successfully establish a connection to the Metastore. From an API perspective any code that calls the unsafe method may be vulnerable unless it performs additional prerechecks on the input arguments.</p> <p>Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution (RCE) since it allows the deserialization of arbitrary data.</p> <p>In real deployments, the vulnerability can be exploited only by authenticated users/clients that were able to successfully establish a connection to the Metastore. From an API perspective any code that calls the unsafe method may be vulnerable unless it performs additional prerechecks on the input arguments.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41137 https://cve.radiocsirt.org/vuln/ghsa-6hqr-c69m-r76q <p><strong>Affected:</strong> Maven: org.apache.hive:hive-exec</p> <p>Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution (RCE) since it allows the deserialization of arbitrary data.</p> <p>In real deployments, the vulnerability can be exploited only by authenticated users/clients that were able to successfully establish a connection to the Metastore. From an API perspective any code that calls the unsafe method may be vulnerable unless it performs additional prerechecks on the input arguments.</p> <p><strong>Affected:</strong> Maven: org.apache.hive:hive-exec</p> <p>Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution (RCE) since it allows the deserialization of arbitrary data.</p> <p>In real deployments, the vulnerability can be exploited only by authenticated users/clients that were able to successfully establish a connection to the Metastore. From an API perspective any code that calls the unsafe method may be vulnerable unless it performs additional prerechecks on the input arguments.</p> https://cve.radiocsirt.org/vuln/ghsa-6hqr-c69m-r76q https://cve.radiocsirt.org/vuln/gsd-2022-41137 gsd-2022-41137 https://cve.radiocsirt.org/vuln/gsd-2022-41137