Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache jspwikiCross-Site Scripting in JSPWikiCVE-2019-10076Public exploitFix available6.1 Medium
- apache uima ducc, uimaducc +1 moreCross-site Scripting in Apache UIMACVE-2018-8035Fix available6.1 Medium
- apache archivaImproper Input Validation in Apache ArchivaCVE-2019-0214Fix available6.5 Medium
- apache archivaCross-site scripting in Apache ArchivaCVE-2019-0213Fix available6.5 Medium
- apache camelPath Traversal in Apache CamelCVE-2019-0194Fix available7.5 High
- apache plutoCross-site Scripting in Apache Pluto Chatroom demoCVE-2019-0186Public exploitFix availableEPSS 20.6%6.1 Medium
- apache qpid, apache software foundation qpid proton, redhat enterprise linux desktop +8 more +10 moreWithdrawn Advisory: Improper Certificate Validation in Apache Qpid ProtonCVE-2019-0223Fix available7.4 High
- apache zeppelinCross-site Scripting in Apache ZeppelinCVE-2018-1328Fix available6.1 Medium
- apache zeppelinImproper Authentication in Apache ZeppelinCVE-2018-1317Fix available8.8 High
- apache zeppelinSession Fixation in Apache ZeppelinCVE-2017-12619Fix available8.1 High
- apache pdfbox, james, fedoraproject fedora +11 more +13 moreVulnerability that affects org.apache.pdfbox:pdfboxCVE-2019-0228Fix available9.8 Critical
- apache airflowApache Airflow vulnerable to Stored XSSCVE-2019-0216Fix available4.8 Medium
- apache airflowApache Airflow vulnerable to CSRF AttacksCVE-2019-0229Fix available8.8 High
- apache tomcatApache Tomcat Denial of Service vulnerabilityCVE-2019-0199Fix availableEPSS 72.9%7.5 High
- apache http server, fedoraproject fedora +1 moreIn Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location...CVE-2019-0215Fix availableEPSS 10.4%7.5 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...CVE-2019-0220Fix availableEPSS 17.9%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- apache http server, canonical ubuntu linux, debian linux +2 moreA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...CVE-2019-0196Fix availableEPSS 19.3%5.3 Medium
- apache activemq, debian linux, netapp e-series santricity web services +5 more +7 moreImproper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-clientCVE-2019-0222Public exploitFix availableEPSS 12.0%7.5 High
- apache jspwikiImproper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-warCVE-2019-0225Public exploitFix available7.5 High
- apache jspwikiModerate severity vulnerability that affects org.apache.jspwiki:jspwiki-mainCVE-2019-0224Fix available6.1 Medium
- apache karafModerate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karafCVE-2019-0191Fix available6.5 Medium
- apache hadoopImproper Privilege Management in org.apache.hadoop:hadoop-mainCVE-2018-11767Fix available7.4 High
- apache solrServer-Side Request Forgery (SSRF) in org.apache.solr:solr-coreCVE-2017-3164Public exploitFix availableEPSS 19.4%7.5 High
- apache solr, netapp storage automation store +1 moreCritical severity vulnerability that affects org.apache.solr:solr-coreCVE-2019-0192Public exploitFix availableEPSS 78.2%9.8 Critical
- apache traffic serversslheaders plugin extracts information from the client certificate and sets headers in the...CVE-2018-11783Fix available7.5 High
- apache qpid broker-jImproper Input Validation in Apache Qpid Broker-JCVE-2019-0200Fix available7.5 High
- apache jmeterUnauthenticated Remote Code Execution in Apache JMeterCVE-2019-0187Fix available9.8 Critical
- apache mesosStack Overflow in Apache MesosCVE-2018-11793Fix available7.5 High
- apache airflowApache Airflow vulnerable to Stored XSSCVE-2018-20244Fix available5.5 Medium
- apache jspwikiCross-site Scripting in jspwiki-warCVE-2018-20242Fix available6.1 Medium
- apache guacamoleMissing Encryption of Sensitive Data in Apache GuacamoleCVE-2018-1340Fix available7.5 High
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in HadoopCVE-2018-1296Fix available7.5 High
- apache sparkPyspark User Impersonation VulnerabilityCVE-2018-11760Fix available5.5 Medium
- apache http server, oracle enterprise manager ops center, hospitality guest access +2 more +4 moreA bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a...CVE-2019-0190Fix availableEPSS 59.9%7.5 High
- apache http server, canonical ubuntu linux, debian linux +9 more +11 moreIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...CVE-2018-17189Fix availableEPSS 19.4%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +3 more +5 moreIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...CVE-2018-17199Fix availableEPSS 20.0%7.5 High
- apache airflowImproper Certificate Validation in Apache AirflowCVE-2018-20245Fix available7.5 High
- apache airflowApache Airflow vulnerable to XSSCVE-2017-17836Fix available9.8 Critical
- apache airflowCross-Site Request Forgery (CSRF) in Apache AirflowCVE-2017-17835Fix available8.8 High
- apache airflowImproper Input Validation in Apache Airflow resulting in Remote Code ExecutionCVE-2017-15720Fix available8.8 High
- apache subversion, canonical ubuntu linux +1 moreSubversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash...CVE-2018-11803Fix availableEPSS 58.5%7.5 High
- apache thriftApache Thrift Node.js static web server sandbox escapeCVE-2018-11798Fix available6.5 Medium
- apache thrift, debian linux, f5 traffix signaling delivery controller +2 more +4 moreImproper Input Validation in Apache ThriftCVE-2018-1320Fix available7.5 High
- apache karafXML External Entity Reference in Apache KarafCVE-2018-11788Public exploitFix available9.8 Critical
- apache couchdbPrior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of...CVE-2018-171887.2 High
- apache netbeansApache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is...CVE-2018-17191Fix available9.8 Critical
- apache openoffice, canonical ubuntu linux +1 moreWhen loading a document with Apache Open Office 4.1.5 and earlier with smaller end line...CVE-2018-11790Fix available7.8 High
- Show moreLoading…