Skip to content
OpenAdvisories

Archive

21 December 2015

Vulnerabilities first published on this day (UTC), newest first.

← November 2015 2015 / December /21 January 2016 →
  1. 12
  2. 219
  3. 38
  4. 4 
  5. 56
  6. 632
  7. 717
  8. 822
  9. 958
  10. 1079
  11. 1172
  12. 125
  13. 139
  14. 1411
  15. 1523
  16. 1638
  17. 1715
  18. 185
  19. 193
  20. 20 
  21. 2116
  22. 221
  23. 2313
  24. 2410
  25. 25 
  26. 262
  27. 2711
  28. 2830
  29. 299
  30. 3016
  31. 3133
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2015-1772

    Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

    The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymous bind configurations, which allows re…

    org.apache.hive:hive-exec org.apache.hive:hive org.apache.hive:hive-service Maven
  • High 7.3
    CVE-2015-1836

    High severity vulnerability that affects org.apache.hbase:hbase

    Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a …

    org.apache.hbase:hbase Maven