apache ignite vulnerabilities and exploits

(subscribe to this query)

Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional functionality, bug fixes and performance improvements. To do that the component communicates to an external PHP server (http://ignite.run) where...

Apache Ignite 1.0.0 Apache Ignite 1.1.0 Apache Ignite 1.2.0 Apache Ignite 1.3.0 Apache Ignite 1.4.0 Apache Ignite 1.5.0 Apache Ignite 1.6.0 Apache Ignite 1.7.0 Apache Ignite 1.8.0 Apache Ignite 1.9.0 Apache Ignite 2.0.0

Apache Ignite prior to 1.9 allows man-in-the-middle malicious users to read arbitrary files via XXE in modified update-notifier documents.

Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by malicious user to access to a filesystem.

Spring Data Commons, versions before 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted r...

Pivotal Software Spring Data Commons Pivotal Software Spring Data Rest Apache Ignite Apache Ignite 1.0.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0

4 Github repositories

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...

Eclipse Jetty Eclipse Jetty 10.0.0 Eclipse Jetty 10.0.1 Eclipse Jetty 11.0.0 Eclipse Jetty 11.0.1 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Apache Ignite Apache Solr 8.8.1 Netapp Cloud Manager -Netapp E-series Performance Analyzer -

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook