Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache traffic serverApache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS...CVE-2010-29524.3 Medium
- apache couchdbUntrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in...CVE-2010-2953Fix available6.9 Medium
- apache couchdbCross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows...CVE-2010-22346.8 Medium
- apache cxfImproper Input Validation in Apache CXFCVE-2010-2076Fix available9.8 Critical
- apache strutsServer side object manipulation in Apache StrutsCVE-2010-1870Public exploitFix availableEPSS 92.0%5.0 Medium
- apache derbyUse of Password Hash With Insufficient Computational Effort in Apache DerbyCVE-2009-4269Fix available2.1 Low
- apache http servermod_proxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend...CVE-2010-2791Fix available5.0 Medium
- apache tomcatCross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the...CVE-2009-26964.3 Medium
- apache http serverThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...CVE-2010-1452Fix availableEPSS 21.4%5.0 Medium
- apache tomcatApache Tomcat does not properly handle an invalid Transfer-Encoding headerCVE-2010-2227Fix availableEPSS 54.8%6.4 Medium
- apache axis2Improper Input Validation in Apache Axis2CVE-2010-1632Fix availableEPSS 22.4%7.5 High
- apache http servermod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha,...CVE-2010-2068EPSS 16.0%5.0 Medium
- apache openoffice, canonical ubuntu linux, debian linux +3 more +5 moreOpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python...CVE-2010-0395Fix availableEPSS 10.5%9.3 High
- apache axis2Improper Neutralization of Input During Web Page Generation in Apache Axis2CVE-2010-2103Public exploitFix availableEPSS 34.9%4.3 Medium
- apache myfacesApache MyFaces Cross-site Scripting vulnerabilityCVE-2010-20864.0 Medium
- apache activemqApache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandlerCVE-2010-1587Public exploitFix availableEPSS 78.0%5.0 Medium
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2010-1157Public exploitFix availableEPSS 52.5%2.6 Low
- apache http serverRace condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers...CVE-2010-11516.8 Medium
- apache ofbizMultiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka...CVE-2010-0432Public exploitEPSS 22.9%4.3 Medium
- apache activemqCross-site request forgery in Apache ActiveMQCVE-2010-1244Fix available6.8 Medium
- apache activemqCross-site scripting in Apache ActiveMQCVE-2010-0684Fix available3.5 Low
- apache couchdbApache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by...CVE-2010-00094.3 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreThe ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,...CVE-2010-0434Fix availableEPSS 18.4%4.3 Medium
- apache http server, broadcom vmware ace management server, ibm websphere application server +2 moremodules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2...CVE-2010-0425Public exploitEPSS 94.2%10.0 High
- apache http serverThe ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2...CVE-2010-0408Fix availableEPSS 20.9%5.0 Medium
- apache openoffice, canonical ubuntu linux, debian linux +2 moreOpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for...CVE-2010-01369.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 morefilter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a...CVE-2009-3302EPSS 11.7%9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreInteger underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote...CVE-2009-3301EPSS 12.0%9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl...CVE-2009-2950EPSS 13.5%9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreInteger overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in...CVE-2009-2949EPSS 14.2%9.3 High
- apache http serverThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows...CVE-2003-15812.6 Low
- apache http serverThe Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a...CVE-2003-15804.3 Medium
- apache http serverInteger overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the...CVE-2010-0010EPSS 43.4%6.8 Medium
- apache tomcatImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache TomcatCVE-2009-2902Fix availableEPSS 10.7%4.3 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2009-2901Fix available4.3 Medium
- apache tomcatApache Tomcat Directory Traversal vulnerabilityCVE-2009-2693Fix available5.8 Medium
- libexpat project libexpat, apache http server +1 moreThe big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig...CVE-2009-3560Fix availableEPSS 24.3%5.0 Medium
- apache tomcatThe Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly...CVE-2009-3548Public exploitEPSS 79.0%7.5 High
- apache http server, gnu gnutls, mozilla nss +5 more +7 moreApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 Medium
- apache solrApache Solr Search for TYPO3 vulnerable to Cross-site ScriptingCVE-2009-3821Fix available4.3 Medium
- libexpat project libexpat, apache http server +1 moreThe updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python,...CVE-2009-3720Fix availableEPSS 27.9%5.0 Medium
- apache http server, portable runtime +1 moreThe Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable...CVE-2009-2699EPSS 14.2%7.5 High
- apache openoffice.orgStack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary...CVE-2009-35699.3 High
- apache http server, apple mac os x, debian linux +4 more +6 moreThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...CVE-2009-3095Fix availableEPSS 13.5%5.0 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreThe ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module in the...CVE-2009-3094Fix available2.6 Low
- apache xerces-c\+\+Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2...CVE-2009-1885Fix available4.3 Medium
- apache xerces2 java, oracle jdk, canonical ubuntu linux +6 more +8 moreDenial of service in Apache Xerces2CVE-2009-2625Fix availableEPSS 30.4%5.0 Medium
- apache apr-util, portable runtime +1 moreMultiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable...CVE-2009-2412Fix availableEPSS 13.8%10.0 High
- apache rollerCross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote...CVE-2008-68794.3 Medium
- apache http server, canonical ubuntu linux, debian linux +6 more +8 moreThe mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion...CVE-2009-1891Fix availableEPSS 17.1%7.1 High
- Show moreLoading…