Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache xml security for c\+\+, shibboleth shibboleth-sp +1 moreOff-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in...CVE-2011-2516Fix available5.0 Medium
- apache httpclientExposure of Sensitive Information to an Unauthorized Actor in Apache HttpClientCVE-2011-1498Fix available4.3 Medium
- apache tomcatInsertion of Sensitive Information into Log File in Apache TomcatCVE-2011-2204Fix available1.9 Low
- apache rampart\/cThe rampart_timestamp_token_validate function in util/rampart_timestamp_token.c in Apache Rampart...CVE-2011-23296.5 Medium
- apache archivaMultiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3...CVE-2011-10774.3 Medium
- apache archivaMultiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2,...CVE-2011-10266.8 Medium
- apache subversionThe mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and...CVE-2011-1921Fix available4.3 Medium
- apache subversion, apple mac os x, canonical ubuntu linux +2 more +4 moreThe mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and...CVE-2011-1783Fix available4.3 Medium
- apache subversion, apple mac os x, canonical ubuntu linux +2 more +4 moreThe mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6...CVE-2011-1752Fix available5.0 Medium
- apache tomcatAccess restriction bypass in Apache TomcatCVE-2011-1582Fix available4.3 Medium
- apache http server, apr-util +1 moreThe fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3...CVE-2011-1928Fix availableEPSS 10.3%4.3 Medium
- apache http server, portable runtime, apple mac os x +7 more +9 moreStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...CVE-2011-0419Public exploitFix availableEPSS 30.4%4.3 Medium
- apache struts, opensymphony webwork, xwork +2 moreXWork in Apache Struts Reveals Sensitive InformationCVE-2011-2088Fix available5.0 Medium
- apache strutsApache Struts Multiple XSS VulnerabilitiesCVE-2011-2087Fix available4.3 Medium
- apache struts, opensymphony webwork, xwork +2 moreCross-site Scripting in Apache StrutsCVE-2011-1772Public exploitFix availableEPSS 33.3%2.6 Low
- apache tomcatApache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote UsersCVE-2011-1475Public exploitFix available5.0 Medium
- apache tomcatAccess controll bypass in Apache TomcatCVE-2011-1183Fix available5.8 Medium
- apache tomcatApache Tomcat does not follow ServletSecurity annotationsCVE-2011-1419Fix available5.8 Medium
- apache tomcatApache Tomcat allows remote attackers to bypass intended access restrictionsCVE-2011-1088Fix available5.8 Medium
- apache subversionThe mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6...CVE-2011-0715Fix available4.3 Medium
- apache archiva, continuum +1 moreApache Continuum and Archiva vulnerable to Cross-site ScriptingCVE-2011-0533Fix available4.3 Medium
- apache tomcatImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2011-0013Fix availableEPSS 10.0%4.3 Medium
- apache tomcatApache Tomcat does not enforce the maxHttpHeaderSize limitCVE-2011-0534Fix available5.0 Medium
- apache tomcatImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2010-3718Fix available1.2 Low
- apache couchdbMultiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka...CVE-2010-38544.3 Medium
- apache openofficeHeap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows...CVE-2010-4643EPSS 10.1%9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows...CVE-2010-4253EPSS 10.1%9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moresoffice in OpenOffice.org (OOo) 3.x before 3.3 places a zero-length directory name in the...CVE-2010-36896.9 Medium
- apache openoffice, canonical ubuntu linux, debian linux +2 moreMultiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in...CVE-2010-3454EPSS 10.3%9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreThe WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x...CVE-2010-34539.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows...CVE-2010-3452EPSS 10.3%9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows...CVE-2010-3451EPSS 10.3%9.3 High
- apache openoffice, canonical ubuntu linux, debian linux +2 moreMultiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow...CVE-2010-3450EPSS 10.7%9.3 High
- apache subversionMultiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated...CVE-2010-4644Fix available3.5 Low
- apache subversionThe walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed...CVE-2010-4539Fix available6.8 Medium
- google chrome, xmlsoft libxml2, apache openoffice +14 more +16 moreDouble free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8...CVE-2010-4494Fix available7.5 High
- apache archivaApache Archiva does not require entry of the administrator's password at the time of modifying a user accountCVE-2010-4408Fix available6.8 Medium
- apache archiva, jesse mcconnell redback +1 moreCross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache...CVE-2010-3449Public exploit6.8 Medium
- apache tomcatApache Tomcat has cookies without HTTPOnly flag in Set-Cookie headerCVE-2010-4312Fix available6.4 Medium
- apache tomcatImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2010-4172Public exploitFix availableEPSS 42.0%4.3 Medium
- apache mod fcgid, fedora, red hat enterprise linux 7 +2 more +4 moreHttpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.cCVE-2010-3872Fix available7.5 High
- apple safari, google chrome, xmlsoft libxml2 +12 more +14 morelibxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier,...CVE-2010-4008Fix available4.3 Medium
- apache shiro, jsecurity +1 moreApache Shiro Path Traversal vulnerabilityCVE-2010-3863Public exploitFix availableEPSS 54.5%5.0 Medium
- apache myfacesImproper Authentication in Apache MyFacesCVE-2010-2057Fix available5.0 Medium
- apache axis2, sap businessobjects +1 moreApache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D...CVE-2010-0219Public exploitEPSS 90.9%10.0 High
- apache qpid, redhat enterprise mrg +1 moreThe SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in...CVE-2009-50064.0 Medium
- apache qpid, redhat enterprise mrg +1 moreThe Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat...CVE-2009-50055.0 Medium
- apache qpid, redhat enterprise mrg +1 moresys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and...CVE-2010-30834.3 Medium
- apache subversionauthz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion...CVE-2010-3315Fix available6.0 Medium
- apache apr-util, http server +1 moreMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...CVE-2010-1623Fix availableEPSS 20.3%5.0 Medium
- Show moreLoading…