Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache subversion, opensuse +1 moreThe mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1...CVE-2013-1845Fix available2.1 Low
- apache activemqImproper Authentication in Apache ActiveMQCVE-2013-3060Fix available6.4 Medium
- apache activemqApache ActiveMQ default configuration subject to denial of serviceCVE-2012-6551Fix available5.0 Medium
- apache activemqCross-site Scripting in Apache ActiveMQCVE-2012-6092Fix available4.3 Medium
- apache mavenThe default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL...CVE-2013-0253Fix available5.8 Medium
- apache commons fileuploadIncorrect Default Permissions in Apache Commons FileUploadCVE-2013-0248Fix available3.3 Low
- apache raveApache Rave information disclosure vulnerabilityCVE-2013-1814Public exploitFix availableEPSS 73.6%4.0 Medium
- apache cxfImproper Authentication in Apache CXFCVE-2013-0239Fix available5.0 Medium
- apache cxfImproper Authentication in Apache CXFCVE-2012-5633Fix available5.8 Medium
- apache qpidThe serializing/deserializing functions in the qpid::framing::Buffer class in Apache Qpid 0.20...CVE-2012-44605.0 Medium
- apache qpidInteger overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and...CVE-2012-44595.0 Medium
- apache qpidThe AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial...CVE-2012-44585.0 Medium
- apache qpidImproper Authentication in Apache QpidCVE-2012-4446Fix available6.8 Medium
- apache http serverMultiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the...CVE-2012-4558Fix availableEPSS 22.9%4.3 Medium
- apache http serverMultiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24...CVE-2012-3499Fix availableEPSS 22.9%4.3 Medium
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3...CVE-2012-56161.5 Low
- apache cxfImproper Authentication in Apache CXFCVE-2012-2378Fix available4.3 Medium
- apache cxfXML Signature/Encryption Not Validated in Apache CXFCVE-2012-2379Fix available10.0 High
- apache tomcatApache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensionsCVE-2012-3544Fix availableEPSS 11.0%5.0 Medium
- apache tomcatorg/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0...CVE-2012-45342.6 Low
- apache tomcatCross-Site Request Forgery in Apache TomcatCVE-2012-4431Public exploitFix available4.3 Medium
- apache tomcatAuthentication Bypass in Apache TomcatCVE-2012-3546Fix availableEPSS 12.0%4.3 Medium
- apache tomcat, opensuse +1 moreApache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage)...CVE-2012-55685.0 Medium
- apache http serverThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...CVE-2012-4557Fix availableEPSS 17.5%5.0 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2012-5887Fix availableEPSS 12.1%5.0 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2012-5886Fix available5.0 Medium
- apache tomcatImproper Access Control in Apache TomcatCVE-2012-5885Fix available5.0 Medium
- apache tomcatjava/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache...CVE-2012-27335.0 Medium
- apache cxf** DISPUTED ** The wsdl_first_https sample code in distribution/src/main/release/samples...CVE-2012-5786Disputed5.8 Medium
- apache axis2Apache Axis2 has Improper Input ValidationCVE-2012-5785Fix available5.8 Medium
- apache activemq, axis, paypal mass pay +2 more +4 moreMan-in-the-middle attack in Apache AxisCVE-2012-5784Fix available5.8 Medium
- apache libcloudApache Libcloud vulnerable to certificate impersonationCVE-2012-3446Fix available5.9 Medium
- apache httpclient, canonical ubuntu linux +1 moreImproper Certificate Validation in Apache Commons HttpClientCVE-2012-5783Fix available5.8 Medium
- apache cloudstackCitrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make...CVE-2012-450110.0 High
- apache ofbizUnspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10...CVE-2012-350610.0 High
- apache axis2Improper Authentication in Apache Axis2CVE-2012-5351Fix available6.4 Medium
- apache axis2Apache Axis2 Vulnerable to XML Signature wrapping attackCVE-2012-4418Fix available5.8 Medium
- apache qpidApache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows...CVE-2012-2145Fix available5.0 Medium
- apache cxfRemote web-service operation execution in Apache CXFCVE-2012-3451Fix available4.3 Medium
- apache wicketCross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1...CVE-2012-33734.3 Medium
- apache strutsDenial of service in Apache StrutsCVE-2012-4387Fix available5.0 Medium
- apache strutsCross-Site Request Forgery in Apache StrutsCVE-2012-4386Fix available6.8 Medium
- apache qpidApache QPID Allows Remote Authentication BypassCVE-2012-3467Fix available5.0 Medium
- apache http serverThe proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http...CVE-2012-35024.3 Medium
- apache http serverMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...CVE-2012-2687Fix availableEPSS 23.1%2.6 Low
- apache openoffice, libreoffice, canonical ubuntu linux +8 more +10 moreMultiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in...CVE-2012-2665Fix available7.5 High
- apache hadoopClient BlockTokens not checked in Apache HadoopCVE-2012-3376Fix available7.5 High
- apache org.apache.sling.servlets.postApache Sling POST Servlets Denial of Service VulnerabilityCVE-2012-2138Public exploitFix availableEPSS 14.0%5.0 Medium
- apache commons compressUncontrolled Resource Consumption in Apache Commons CompressCVE-2012-2098Fix availableEPSS 12.8%5.0 Medium
- apache rollerMultiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote...CVE-2012-23813.5 Low
- Show moreLoading…