Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache portable runtime, portable runtime (apr), oracle http server +2 moreRegression of CVE-2017-12613CVE-2021-35940Fix available7.1 High
- apache ofbizArbitrary file upload vulnerability in OFBizCVE-2021-376089.8 Critical
- apache rollerregex injection leading to DoSCVE-2021-335807.5 High
- apache airflowNo Authentication on Logging ServerCVE-2021-35936Fix available5.3 Medium
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreRequest splitting via HTTP/2 method injection and mod_proxyCVE-2021-33193Fix availableEPSS 46.2%7.5 High
- apache servicecombServiceComb ServiceCenter Directory TraversalCVE-2021-21501Fix available7.5 High
- apache juddiRemote code execution via RMICVE-2021-37578Fix available9.8 Critical
- apache directory studioStartTLS and SASL confidentiality protection bypassCVE-2021-33900Fix available7.5 High
- apache impalaImpala logs contain secretsCVE-2021-281317.5 High
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerabilityCVE-2021-36374Fix available5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerabilityCVE-2021-36373Fix available5.5 Medium
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Fix availableEPSS 12.9%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 moreApache Commons Compress 1.1 to 1.20 denial of service vulnerabilityCVE-2021-35517Fix availableEPSS 10.6%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35516Fix availableEPSS 12.4%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35515Fix availableEPSS 11.6%7.5 High
- apache tomcat, tomee, debian linux +19 more +21 moreIncorrect Transfer-Encoding handling with HTTP/1.0CVE-2021-33037Fix availableEPSS 74.7%5.3 Medium
- apache tomcat, debian linux, oracle communications cloud native core policy +4 more +6 moreAuth weakness in JNDIRealmCVE-2021-30640Fix available6.5 Medium
- apache tomcat, mcafee epolicy orchestrator, oracle big data spatial and graph +2 moreDoS after non-blocking IO errorCVE-2021-30639Fix available7.5 High
- apache sshd, apache software foundation mina sshd, oracle banking payments +7 more +9 moreDoS/OOM leak vulnerability in Apache Mina SSHD ServerCVE-2021-30129Fix available6.5 Medium
- apache jena fusekiDisplay information UI XSSCVE-2021-33192Fix available6.1 Medium
- apache druidApache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intendedCVE-2021-26920Fix available6.5 Medium
- apache traffic server, debian linux +1 moreDynamic stack buffer overflow in cachekey pluginCVE-2021-35474Fix available9.8 Critical
- apache traffic server, debian linux +1 moreReading HTTP/2 frames too many timesCVE-2021-32567Fix available7.5 High
- apache traffic server, debian linux +1 moreSpecific sequence of HTTP/2 frames can cause ATS to crashCVE-2021-32566Fix available7.5 High
- apache traffic server, debian linux +1 moreHTTP Request Smuggling, content length with invalid chartersCVE-2021-32565Fix available7.5 High
- apache traffic server, debian linux +1 moreIncorrect handling of url fragment leads to cache poisoningCVE-2021-27577Fix available7.5 High
- apache nuttxmalloc, realloc and memalign implementations are vulnerable to integer wrap-aroundsCVE-2021-264619.8 Critical
- apache cxf, tomee, oracle business intelligence +2 more +4 moreApache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriterCVE-2021-30468Fix available7.5 High
- apache chainsaw, log4j, qos reload4j +2 moreJava deserialization in ChainsawCVE-2020-9493Fix available9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreNULL pointer dereference on specially crafted HTTP/2 requestCVE-2021-31618Fix availableEPSS 52.1%7.5 High
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +4 more +6 moreA carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-31812Fix available5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny fileCVE-2021-31811Fix available5.5 Medium
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreUnexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641Fix availableEPSS 51.8%5.3 Medium
- apache http server, debian linux, fedoraproject fedora +5 more +7 moreApache HTTP Server mod_session response handling heap overflowCVE-2021-26691Fix availableEPSS 68.1%9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_session NULL pointer dereferenceCVE-2021-26690Public exploitFix availableEPSS 65.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_auth_digest possible stack overflow by one nul byteCVE-2020-35452Fix availableEPSS 53.2%7.3 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moremod_proxy_http NULL pointer dereferenceCVE-2020-13950Fix availableEPSS 50.0%7.5 High
- apache http server, mcafee epolicy orchestrator, netapp cloud backup +2 moreImproper Handling of Insufficient PrivilegesCVE-2020-13938Fix availableEPSS 11.8%5.5 Medium
- apache http server, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moremod_proxy_wstunnel tunneling of non Upgraded connectionsCVE-2019-17567Fix availableEPSS 59.7%5.3 Medium
- apache apisix dashboardBypass network access controlCVE-2021-33190Fix available5.3 Medium
- apache dubboApache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)CVE-2021-30180Public exploitFix availableEPSS 60.3%9.8 Critical
- apache dubboApache Dubbo Pre-auth RCE via Java deserialization in the Generic filterCVE-2021-30179Fix available9.8 Critical
- apache dubboOpen Redirect or SSRF vulnerability usage of parseURLCVE-2021-25640Fix available6.1 Medium
- apache dubboApache Dubbo RCE on customers via Script route poisoning (Nashorn script injection)CVE-2021-30181Public exploitFix availableEPSS 60.9%9.8 Critical
- apache dubboDubbo Zookeeper does not check serialization idCVE-2021-25641Public exploitFix availableEPSS 21.2%9.8 Critical
- apache fineractdisabled hostname verificiationCVE-2020-175147.4 High
- apache pulsarAuthentication with JWT allows use of “none”-algorithmCVE-2021-22160Fix availableEPSS 52.9%9.8 Critical
- apache wicketDNS proxy and possible amplification attackCVE-2021-23937Fix available7.5 High
- apache traffic serverApache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.CVE-2021-277377.5 High
- apache unomiApache Unomi log injectionCVE-2021-31164Fix available7.5 High
- Show moreLoading…