Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache rollerMultiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache...CVE-2012-23806.8 Medium
- apache openoffice.org, libwpd, redhat enterprise linux optional productivity applications +1 more +3 moreThe WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as...CVE-2012-2149Fix availableEPSS 13.7%7.5 High
- apache openoffice.org, libreoffice +1 moreInteger overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta,...CVE-2012-2334Fix availableEPSS 13.4%6.8 Medium
- apache openoffice.org, libreoffice, debian linux +7 more +9 moreInteger overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly...CVE-2012-1149Fix availableEPSS 14.0%7.5 High
- apache poiDenial of Service in Apache POICVE-2012-0213Fix available5.0 Medium
- apache qpidApache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which...CVE-2011-3620Fix available7.5 High
- apache http server, opensuse +1 moreenvvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory...CVE-2012-0883Fix available6.9 Medium
- apache hadoop, cloudera cdh +1 moreApache Hadoop allows impersonation of arbitrary cluster user accountsCVE-2012-1574Fix available6.5 Medium
- apache traffic serverApache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly...CVE-2012-0256Fix available5.0 Medium
- apache wicketDirectory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5...CVE-2012-10895.0 Medium
- apache wicketCross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote...CVE-2012-00474.3 Medium
- apache openoffice, librdf raptor, libreoffice +10 more +12 moreRedland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice...CVE-2012-0037Fix availableEPSS 13.5%6.5 Medium
- apache mod fcgidfcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the...CVE-2012-1181Fix available5.0 Medium
- apache strutsApache Struts Code injection due to conversion errorCVE-2012-0838Fix availableEPSS 13.7%10.0 High
- apache portable runtimetables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values...CVE-2012-0840Public exploitFix availableEPSS 42.1%5.0 Medium
- apache strutsWithdrawn Advisory: Apache Struts XSSCVE-2012-1007Public exploitEPSS 32.8%4.3 Medium
- apache strutsApache Struts Multiple Cross-site Scripting VulnerabilitiesCVE-2012-1006Public exploitFix availableEPSS 56.6%4.3 Medium
- apache http server, debian linux, opensuse +8 more +10 moreprotocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header...CVE-2012-0053Public exploitFix availableEPSS 82.2%4.3 Medium
- apache http serverThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...CVE-2012-0021Fix availableEPSS 30.3%2.6 Low
- apache tomcatDenial of Service in Apache TomcatCVE-2012-0022Fix availableEPSS 10.5%5.0 Medium
- apache tomcatApache Tomcat Exposes IP Addresses and HTTP Headers of RequestsCVE-2011-3375Fix available5.0 Medium
- apache http server, debian linux, opensuse +9 more +11 morescoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a...CVE-2012-0031Public exploitFix available4.6 Medium
- apache tomcatUse of Hard-coded Cryptographic Key in Apache TomcatCVE-2011-5064Fix available4.3 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2011-5063Fix available4.3 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2011-5062Fix available5.0 Medium
- apache tomcatAuthentication Bypass in Apache TomcatCVE-2011-1184Fix available5.0 Medium
- apache strutsApache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly...CVE-2011-5057Public exploitEPSS 27.2%5.0 Medium
- apache strutsApache Struts's DebuggingInterceptor component allows remote code execution in developer modeCVE-2012-0394Public exploitFix availableDisputedEPSS 72.9%6.8 Medium
- apache strutsApache Struts's ParameterInterceptor component does not prevent access to public constructorsCVE-2012-0393Public exploitFix availableEPSS 36.3%6.4 Medium
- apache strutsApache Struts's CookieInterceptor component does not use the parameter-name whitelistCVE-2012-0392Public exploitFix availableEPSS 97.5%6.8 Medium
- apache struts, struts 2 +1 moreApache Struts Remote Java Code ExecutionCVE-2012-0391In KEVPublic exploitFix availableEPSS 75.6%9.8 Critical
- apache tomcatImproper Input Validation in Apache TomcatCVE-2011-4858Public exploitFix availableEPSS 79.7%5.0 Medium
- apache activemqDenial of Service in Apache ActiveMQCVE-2011-4905Fix available5.0 Medium
- apache geronimoApache Geronimo Hash Collisions Cause DoSCVE-2011-5034Public exploitFix availableEPSS 80.6%7.8 High
- apache http serverThe Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon...CVE-2007-6750Public exploitFix availableEPSS 70.5%5.0 Medium
- apache http serverThe mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2...CVE-2011-4317Public exploitFix availableEPSS 59.6%4.3 Medium
- apache http server, http server2.0a1, http server2.0a2 +7 more +9 moreThe mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when...CVE-2011-3639Public exploitFix availableEPSS 49.7%4.3 Medium
- apache tomcatorg/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not...CVE-2011-33764.4 Medium
- apache http serverThe ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x...CVE-2011-4415Public exploitFix available1.2 Low
- apache http serverInteger overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x...CVE-2011-3607Public exploitFix available4.4 Medium
- apache http serverThe mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2...CVE-2011-3368Public exploitFix availableEPSS 90.7%5.0 Medium
- apache jservThe default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2...CVE-2000-12472.1 Low
- apache http server, redhat jboss enterprise web server +1 moreThe mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with...CVE-2011-3348Fix availableEPSS 22.4%4.3 Medium
- apache libcloudApache Libcloud does not verify SSL certificates for HTTPS connectionsCVE-2010-4340Fix available4.3 Medium
- apache tomcatApache Tomcat Allows Remote Attackers to Spoof AJP RequestsCVE-2011-3190Fix availableEPSS 15.2%7.5 High
- apache wicketCross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when...CVE-2011-27122.6 Low
- apache http server, canonical ubuntu linux, opensuse +2 more +4 moreThe byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2...CVE-2011-3192Public exploitFix availableEPSS 98.9%7.8 High
- apache tomcat, commons daemon +1 morenative/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache...CVE-2011-2729Fix available5.0 Medium
- apache tomcatApache Tomcat Allows Replacing of XML ParserCVE-2011-2481Fix available4.6 Medium
- apache tomcatImproper Input Validation in Apache TomcatCVE-2011-2526Fix available4.4 Medium
- Show moreLoading…