Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache couchdbApache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers...CVE-2012-56496.8 Medium
- apache cxfUncontrolled Resource Consumption in Apache CXFCVE-2014-0110Fix available4.3 Medium
- apache cxfUncontrolled Resource Consumption in Apache CXFCVE-2014-0109Fix available4.3 Medium
- apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0116Fix available5.8 Medium
- apache commons beanutils, struts +1 moreArbitrary code execution in Apache Commons BeanUtilsCVE-2014-0114Public exploitFix availableEPSS 99.0%7.5 High
- apache harmony, google android +1 moreThe engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony...CVE-2013-73725.0 Medium
- apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0113Public exploitFix availableEPSS 78.3%7.5 High
- apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0112Public exploitFix availableEPSS 98.1%7.5 High
- apache archivaCross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8...CVE-2013-21874.3 Medium
- apache syncopeApache Syncope JEXL Code InjectionCVE-2014-0111Fix available6.5 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- apache couchdbApache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and...CVE-2014-2668Public exploitFix availableEPSS 22.7%5.0 Medium
- apache xalan-java, oracle webcenter sites +1 moreImproper Authorization in Apache Xalan-JavaCVE-2014-0107Fix availableEPSS 14.1%7.5 High
- apache camelApache Camel's XSLT component allows remote attackers to execute arbitrary Java methodsCVE-2014-0003Fix available7.5 High
- apache camelApache Camel's XSLT component allows remote attackers to read arbitrary filesCVE-2014-0002Fix availableEPSS 27.4%7.5 High
- apache couchdbCross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x...CVE-2012-56504.3 Medium
- apache couchdb, mochiweb project mochiweb +1 moreDirectory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb...CVE-2012-56415.0 Medium
- apache http server, canonical ubuntu linux, oracle secure global desktop +2 moreThe log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP...CVE-2014-0098Fix availableEPSS 26.7%5.0 Medium
- apache http server, canonical ubuntu linux +1 moreThe dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server...CVE-2013-6438Fix availableEPSS 27.5%5.0 Medium
- apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0094Public exploitFix availableEPSS 99.4%5.0 Medium
- adobe phonegap, apache cordova +1 moreApache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do...CVE-2014-18847.5 High
- adobe phonegap, apache cordova +1 moreApache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to...CVE-2014-1882EPSS 11.9%7.5 High
- adobe phonegap, apache cordova +1 moreApache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to...CVE-2014-1881EPSS 11.4%7.5 High
- adobe phonegap, apache cordova +1 moreApache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of...CVE-2012-66377.5 High
- apache tomcat, debian linux, oracle solaris +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2013-4590Fix available4.3 Medium
- apache tomcatImproper Input Validation in Apache TomcatCVE-2014-0033Fix available4.3 Medium
- apache tomcatApache Tomcat Denial of Service vulnerabilityCVE-2013-4322Public exploitFix available4.3 Medium
- apache tomcatApache Tomcat is vulnerable to HTTP request-smugglingCVE-2013-4286Fix availableEPSS 16.2%5.8 Medium
- xstream, apache activemq, oracle endeca information discovery studio +2 moreCommand Injection in XstreamCVE-2013-7285Public exploitFix availableEPSS 84.4%9.8 Critical
- apache tomcat** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its...CVE-2013-0346Disputed2.1 Low
- apache subversionThe get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15...CVE-2014-0032Fix availableEPSS 11.1%4.3 Medium
- apache wicketUnspecified vulnerability in Apache Wicket 1.4.x before 1.4.23, 1.5.x before 1.5.11, and 6.x...CVE-2013-20555.0 Medium
- apache commons fileupload, tomcat, oracle retail applications +2 moreCommons FileUpload Denial of service vulnerabilityCVE-2014-0050Public exploitFix availableEPSS 83.3%7.5 High
- apache activemqApache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servletCVE-2013-1880Fix available4.3 Medium
- apache ofbizMultiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in...CVE-2013-0177Public exploitEPSS 21.2%3.5 Low
- apache hadoopImproper Authentication in Apache HadoopCVE-2013-2192Fix available3.2 Low
- apache tomcat, redhat jboss enterprise application platform, jboss enterprise portal platform +2 moreDeserialization of Untrusted Data in Apache TomcatCVE-2013-2185Fix availableDisputed7.5 High
- apache cloudstackThe (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow...CVE-2014-00314.0 Medium
- apache cloudstackThe virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in...CVE-2013-63982.8 Low
- apache santuario xml security for javaImproper Input Validation in Apache Santuario XML SecurityCVE-2013-4517Fix available4.3 Medium
- apache libcloudLibcloud does not properly scrub data when destroying a DigitalOcean nodeCVE-2013-6480Public exploitFix available2.1 Low
- apache solrImproper Restriction of XML External Entity Reference in Apache SolrCVE-2012-6612Fix availableEPSS 10.1%7.5 High
- apache solrXML Injection in Apache SolrCVE-2013-6408Fix availableEPSS 11.4%6.4 Medium
- apache solrApache Solr UpdateRequestHandler for XML resolves XML External EntitiesCVE-2013-6407Fix availableEPSS 11.4%6.4 Medium
- apache solrImproper Limitation of a Pathname to a Restricted Directory in Apache SolrCVE-2013-6397Fix availableEPSS 56.5%4.3 Medium
- apache rollerCertain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow...CVE-2013-4212Public exploitEPSS 81.1%6.8 Medium
- apache rollerMultiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.2 allow remote...CVE-2013-41714.3 Medium
- apache subversion, mod dav svn +1 moreThe get_parent_resource function in repos.c in mod_dav_svn Apache HTTPD server module in...CVE-2013-4558Fix available3.5 Low
- apache subversion, mod dontdothat +1 moreThe is_this_legal function in mod_dontdothat for Apache Subversion 1.4.0 through 1.7.13 and 1.8.0...CVE-2013-4505Fix available2.6 Low
- apache tomcat** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in the Manager application in...CVE-2013-6357Public exploitDisputed6.8 Medium
- Show moreLoading…