| CVE-2026-44615 |
Path traversal vulnerability in Apache Zeppelin
|
Non notée
|
31 juil. 2026 |
| CVE-2026-44617 |
LDAP filter injection vulnerability in Apache Zeppelin
|
Non notée
|
30 juil. 2026 |
| CVE-2026-44616 |
LDAP injection vulnerability in Apache Zeppelin
|
Non notée
|
30 juil. 2026 |
| CVE-2026-44613 |
Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin
|
Non notée
|
30 juil. 2026 |
| CVE-2024-51775 |
Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin
|
Non notée
|
3 août 2025 |
| CVE-2024-41177 |
Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin
|
Non notée
|
3 août 2025 |
| CVE-2024-52279 |
Improper Input Validation vulnerability in Apache Zeppelin
|
Non notée
|
3 août 2025 |
| CVE-2024-41169 |
The attacker can use the raft server protocol in an unauthenticated way
|
Non notée
|
12 juil. 2025 |
| CVE-2024-31867 |
Improper Input Validation vulnerability in Apache Zeppelin
|
Non notée
|
9 avr. 2024 |
| CVE-2024-31868 |
Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin
|
Non notée
|
9 avr. 2024 |
| CVE-2024-31866 |
Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin
|
Non notée
|
9 avr. 2024 |
| CVE-2024-31865 |
Improper Input Validation vulnerability in Apache Zeppelin
|
Non notée
|
9 avr. 2024 |
| CVE-2024-31864 |
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Zeppelin
|
Non notée
|
9 avr. 2024 |
| CVE-2024-31863 |
Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects…
|
Non notée
|
9 avr. 2024 |
| CVE-2024-31862 |
Improper Input Validation vulnerability in Apache Zeppelin when creating a new note from Zeppelin's UI.This issue…
|
Non notée
|
9 avr. 2024 |
| CVE-2021-28656 |
Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit…
|
Non notée
|
9 avr. 2024 |
| CVE-2024-31860 |
Improper Input Validation vulnerability in Apache Zeppelin
|
Non notée
|
9 avr. 2024 |
| CVE-2022-46870 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin…
|
Non notée
|
16 déc. 2022 |
| CVE-2021-28655 |
The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker…
|
Non notée
|
16 déc. 2022 |
| CVE-2021-27578 |
Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious…
|
Non notée
|
2 sept. 2021 |
| CVE-2020-13929 |
Authentication bypass vulnerability in Apache Zeppelin allows an attacker to bypass Zeppelin authentication mechanism to…
|
Non notée
|
2 sept. 2021 |
| CVE-2019-10095 |
bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark…
|
Non notée
|
2 sept. 2021 |
| CVE-2018-1328 |
Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions
|
Non notée
|
23 avr. 2019 |
| CVE-2018-1317 |
In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as…
|
Non notée
|
23 avr. 2019 |
| CVE-2017-12619 |
Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user…
|
Non notée
|
23 avr. 2019 |