Archive

25 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /25 September 2022 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.8

CVE-2022-36804 Exploited Public exploit Scanner template EPSS 99%

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 be…

Atlassian Bitbucket Server Bitbucket Data Center

Aug 25, 2022
KEV Sep 30, 2022
High 8.8

CVE-2021-25642 Public exploit

Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler

ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users sho…

Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-yarn-server Maven

Aug 25, 2022