Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache software foundation airflow, apache apache-airflow-providers-docker +1 moreDocker Provider <3.0 RCE vulnerability in example dagCVE-2022-38362Fix available8.8 High
- apache openofficeApache OpenOffice Weak Master KeysCVE-2022-374018.8 High
- apache openofficeApache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master PasswordCVE-2022-374008.8 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreImproper HTTP/2 scheme and method validationCVE-2022-31779Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreImproper input validation on HTTP/2 headersCVE-2022-25763Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreHTTP/2 framing vulnerabilitiesCVE-2022-31780Fix available7.5 High
- apache traffic server, debian linux +1 moreTransfer-Encoding not treated as hop-by-hopCVE-2022-31778Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreInsufficient Validation of HTTP/1.x HeadersCVE-2022-28129Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreProtocol vs scheme mismatchCVE-2021-37150Fix available7.5 High
- apache avroInteger overflow when reading corrupted .avro file in Avro Rust SDKCVE-2022-36125Fix available7.5 High
- apache avroMemory overconsumption in Avro Rust SDKCVE-2022-36124Fix available7.5 High
- apache avroDenial of service while reading data in Avro Rust SDKCVE-2022-35724Fix available7.5 High
- apache hadoopCommand injection in org.apache.hadoop.fs.FileUtil.unTarUsingTarCVE-2022-25168Fix available9.8 Critical
- apache jspwikiUser Group Privilege EscalationCVE-2022-34158Fix available8.8 High
- apache jspwikiApache JSPWiki Cross-site scripting vulnerability on WeblogPluginCVE-2022-28732Fix availableEPSS 82.8%6.1 Medium
- apache jspwikiApache JSPWiki CSRF in UserPreferences.jspCVE-2022-28731Fix availableEPSS 58.7%6.5 Medium
- apache jspwikiApache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jspCVE-2022-28730Fix availableEPSS 86.2%6.1 Medium
- apache jspwikiXSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2CVE-2022-27166Fix availableEPSS 86.2%6.1 Medium
- apache calcite avaticaApache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vectorCVE-2022-36364Fix available8.8 High
- apache mxnetReDoS in Apache MXNet RTC ModuleCVE-2022-24294Fix available7.5 High
- oracle jdk, openjdk, apache xalan-java +14 more +16 moreApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169Public exploitFix availableEPSS 81.8%7.5 High
- apache cloudstackApache CloudStack SAML Single Sign-On XXECVE-2022-357419.8 Critical
- apache skywalking nodejs agentService unavailability impact in NodeJS agent(version <= 0.5.0)CVE-2022-36127Fix available7.5 High
- apache sparkApache Spark shell command injection vulnerability via Spark UICVE-2022-33891In KEVPublic exploitFix availableEPSS 93.2%8.8 High
- apache hiveApache Hive Security vulnerability in Hive with UDFsCVE-2021-34538Fix available7.5 High
- apache tapestryRegular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)CVE-2022-31781Fix available7.5 High
- apache druidClickjacking in the web consoleCVE-2022-28889Fix available4.3 Medium
- apache druidReflected XSS on certain HTTP endpointsCVE-2021-44791Fix available6.1 Medium
- apache supersetImproper access to dataset metadata informationCVE-2021-37839Fix available4.3 Medium
- apache jetspeed, portals jetspeed, apache software foundation portals +2 moreApache Portals Jetspeed XSS, CSRF, SSRF, and XXE issuesCVE-2022-325339.8 Critical
- apache commons configuration, debian linux, netapp snapcenter +2 moreApache Commons Configuration insecure interpolation defaultsCVE-2022-33980Public exploitFix availableEPSS 44.6%9.8 Critical
- apache shiroAuthentication Bypass VulnerabilityCVE-2022-32532Public exploitFix availableEPSS 25.5%9.8 Critical
- apache tikaIncomplete fix and new regex DoS in StandardsExtractingContentHandlerCVE-2022-33879Fix available3.3 Low
- apache systemdsDenial of service in readExternal methodCVE-2022-26477Fix available7.5 High
- apache tomcatXSS in examples web applicationCVE-2022-34305Fix available6.1 Medium
- apache sling api, sling commons log, apache software foundation sling +2 morelog injection in Sling loggingCVE-2022-325495.3 Medium
- apache nifi, nifi registry +1 moreImproper Neutralization of Command Elements in Shell User Group ProviderCVE-2022-33140Public exploitFix available8.8 High
- apache hadoopApache Hadoop Privilege escalation vulnerabilityCVE-2021-33036Fix available8.8 High
- apache flumeApache Flume vulnerable to a JNDI RCE in JMSSourceCVE-2022-25167Fix available9.8 Critical
- apache hadoopHeap buffer overflow in libhdfs native libraryCVE-2021-37404Fix available9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy X-Forwarded-For dropped by hop-by-hop mechanismCVE-2022-31813Public exploitFix available9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreInformation Disclosure in mod_lua with websocketsCVE-2022-30556Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_sed denial of serviceCVE-2022-30522Fix availableEPSS 89.9%7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreDenial of service in mod_lua r:parsebodyCVE-2022-29404Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreRead beyond bounds in ap_strcmp_match()CVE-2022-28615Fix available9.1 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreread beyond bounds via ap_rwrite()CVE-2022-28614Fix available5.3 Medium
- apache http serverread beyond bounds in mod_isapiCVE-2022-28330Fix available5.3 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy_ajp: Possible request smugglingCVE-2022-26377Public exploitFix availableEPSS 21.1%7.5 High
- apache dubbobypass of CVE-2021-25640CVE-2022-24969Fix available6.1 Medium
- apache tikaMissing fix for CVE-2022-30126 in 1.28.2CVE-2022-30973Fix available5.5 Medium
- Show moreLoading…