Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache strutsApache Struts is vulnerable to Cross-site ScriptingCVE-2013-6348Fix available4.3 Medium
- apache sling, sling auth core component +1 moreApache Sling Auth Core bundle vulnerable to Open RedirectionCVE-2013-4390Fix available5.8 Medium
- apache shindigApache Shindig PHP Sensitive Information DisclosureCVE-2013-4295Public exploitFix availableEPSS 11.7%5.0 Medium
- apache org.apache.sling.servlets.postImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache SlingCVE-2013-2254Fix available5.0 Medium
- apache mod fcgid, debian linux, opensuse +2 more +4 moreHeap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the...CVE-2013-4365Fix availableEPSS 13.5%7.5 High
- apache camelImproper Control of Generation of Code in Apache CamelCVE-2013-4330Fix available6.8 Medium
- apache struts, oracle flexcube private banking, mysql enterprise monitor +1 more +3 moreCode injection in Apache StrutsCVE-2013-4316Fix available10.0 High
- apache strutsApache Struts2 Broken Access Control VulnerabilityCVE-2013-4310Fix available5.8 Medium
- apache subversionSvnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to...CVE-2013-4277Fix available3.3 Low
- apache qpid, redhat enterprise mrg +1 moreApache Qpid Python client Improper certificate validationCVE-2013-1909Fix available5.8 Medium
- apache santuario xml security for javaInefficient Algorithmic Complexity in Apache Santuario XML SecurityCVE-2013-2172Fix available4.3 Medium
- apache cxfMissing XML Validation in Apache CXFCVE-2013-2160Public exploitFix availableEPSS 32.3%5.0 Medium
- apache cloudstackMultiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow...CVE-2013-21364.3 Medium
- apache cxf, redhat jboss enterprise application platform, jboss enterprise portal platform +3 more +5 moreInadequate Encryption Strength in Apache CXFCVE-2012-5575Public exploitFix available6.4 Medium
- apache ofbizApache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02...CVE-2013-2250EPSS 12.4%10.0 High
- apache ofbizCross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in...CVE-2013-21374.3 Medium
- apache tomcat, debian linux +1 moreImproper Access Control in Apache TomcatCVE-2014-7810Fix availableEPSS 13.3%5.0 Medium
- apache tomcat, oracle virtualization +1 moreUncontrolled Resource Consumption in Apache TomcatCVE-2014-0230Fix availableEPSS 20.2%7.8 High
- apache tomcatImproper Input Validation in Apache TomcatCVE-2014-0227Fix availableEPSS 21.0%6.4 Medium
- apache openofficeApache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service ...CVE-2013-4156Fix available6.8 Medium
- apache subversionThe mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1...CVE-2013-4131Fix available4.0 Medium
- apache openofficeApache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service ...CVE-2013-2189Fix available6.8 Medium
- apache subversion, opensuse +1 morecontrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated...CVE-2013-2088Public exploitFix availableEPSS 31.5%7.1 High
- apache http servermod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds...CVE-2013-2249Fix availableEPSS 14.6%7.5 High
- apache xerces2 java, ibm java, oracle jre +12 more +14 moreMissing XML Validation in Apache Xerces2CVE-2013-4002Public exploitFix availableEPSS 24.7%7.1 High
- apache struts, archiva, fujitsu interstage business process manager analytics +1 more +3 moreCode injection in Apache StrutsCVE-2013-2251In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apache strutsOpen redirect in Apache StrutsCVE-2013-2248Public exploitFix availableEPSS 94.7%5.8 Medium
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2013-1879Fix available4.3 Medium
- apache strutsArbitrary code execution in Apache Struts 2CVE-2013-2135Fix availableEPSS 13.8%9.3 High
- apache strutsArbitrary code execution in Apache Struts 2CVE-2013-2134Public exploitFix availableEPSS 70.2%9.3 High
- apache geronimo, ibm websphere application server +1 moreApache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1CVE-2013-1777Fix available10.0 High
- apache openjpaDeserialization of Untrusted Data in Apache OpenJPACVE-2013-1768Fix available7.5 High
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...CVE-2013-1896Fix availableEPSS 29.5%4.3 Medium
- apache strutsCode injection in Apache StrutsCVE-2013-2115Public exploitFix availableEPSS 74.6%8.1 High
- apache strutsArbitrary code execution in Apache StrutsCVE-2013-1966Public exploitFix availableEPSS 73.7%9.3 High
- apache struts, struts2-showcase +1 moreImproper Control of Generation of Code in Apache StrutsCVE-2013-1965Public exploitFix availableEPSS 93.5%9.3 High
- apache xml security for c\+\+Heap-based buffer overflow in the XML Signature Reference functionality in Apache Santuario XML...CVE-2013-2210Fix available7.5 High
- apache xml security for c\+\+Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon...CVE-2013-2156Fix available7.5 High
- apache xml security for c\+\+Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly...CVE-2013-2155Fix available5.8 Medium
- apache xml security for c\+\+Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference...CVE-2013-2154Fix available7.5 High
- apache xml security for c\+\+The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML...CVE-2013-2153Fix available4.3 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...CVE-2013-1862Fix availableEPSS 24.9%5.1 Medium
- apache subversion, canonical ubuntu linux, opensuse +2 moreThe svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers...CVE-2013-2112Fix available7.8 High
- apache subversion, canonical ubuntu linux, opensuse +2 moreSubversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a...CVE-2013-1968Fix available5.5 Medium
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2013-2071Fix available2.6 Low
- apache tomcatImproper Authentication in Apache TomcatCVE-2013-2067Fix availableEPSS 10.4%6.8 Medium
- apache subversionThe mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote...CVE-2013-1884Public exploitFix availableEPSS 50.5%5.0 Medium
- apache subversionThe mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1...CVE-2013-1849Fix available4.3 Medium
- apache subversionThe mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1...CVE-2013-1847Public exploitFix availableEPSS 51.4%5.0 Medium
- apache subversion, opensuse +1 moreThe mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1...CVE-2013-1846Fix available4.0 Medium
- Show moreLoading…