Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- jqueryui jquery ui, apache drill, debian linux +3 more +5 moreCross-site Scripting in jquery-uiCVE-2010-5312Fix availableEPSS 18.4%6.1 Medium
- apache qpidXML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows...CVE-2014-36294.3 Medium
- apache hiveLow severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-serviceCVE-2014-0228Fix available3.5 Low
- apache cordovaApache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary...CVE-2014-35024.3 Medium
- apache cordovaApache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and...CVE-2014-35014.3 Medium
- apache cordovaApache Cordova Android before 3.5.1 allows remote attackers to change the start page via a...CVE-2014-35006.4 Medium
- apache cxf, wss4j +1 moreImproper Authentication in Apache WSS4JCVE-2014-3623Fix available5.0 Medium
- apache cxfLoop with Unreachable Exit Condition in Apache CXFCVE-2014-3584Fix available5.0 Medium
- apache shiroApache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled,...CVE-2014-0074Fix available7.5 High
- apache axis2\/cApache Axis2/C does not verify that the server hostname matches a domain name in the subject's...CVE-2012-61074.3 Medium
- apache tomcatApache Tomcat Unrestricted file upload vulnerabilityCVE-2013-4444Fix availableEPSS 14.0%6.8 Medium
- apache http server, canonical ubuntu linux, oracle enterprise manager ops center +6 more +8 moreThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...CVE-2014-3581Fix availableEPSS 13.5%5.0 Medium
- apache poiImproper Input Validation in Apache POICVE-2014-3574Fix available4.3 Medium
- apache poiImproper Restriction of XML External Entity Reference in Apache POICVE-2014-3529Fix availableEPSS 12.8%4.3 Medium
- apache axisImproper Validation of Certificates in apache axisCVE-2014-3596Fix available5.8 Medium
- apache openoffice, libreoffice, redhat enterprise linux desktop +2 more +4 moreThe OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow...CVE-2014-3575Fix availableEPSS 11.3%4.3 Medium
- apache openoffice, libreoffice +1 moreApache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and possibly...CVE-2014-3524Fix availableEPSS 14.1%9.3 High
- apache commons-httpclientImproper certificate validation in org.apache.httpcomponents:httpclientCVE-2012-6153Fix available4.3 Medium
- apache traffic serverUnspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x...CVE-2014-3525Fix available10.0 High
- apache ofbizMultiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes...CVE-2014-02324.3 Medium
- apache httpasyncclient, httpclient +1 moreImproper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclientCVE-2014-3577Fix available5.8 Medium
- apache subversion, apple xcode, opensuse +6 more +8 moreThe mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote...CVE-2015-0251Fix available4.0 Medium
- apache subversion, apple xcode, opensuse +6 more +8 moreThe (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through...CVE-2015-0248Fix availableEPSS 12.8%5.0 Medium
- apache subversion, apple xcode, redhat enterprise linux desktop +3 more +5 moreThe mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x...CVE-2014-8108Fix available5.0 Medium
- apache subversion, apple xcode, debian linux +5 more +7 moreThe mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x...CVE-2014-3580Fix availableEPSS 11.0%5.0 Medium
- apache subversion, apple xcode, canonical ubuntu linux +1 more +3 moreThe Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10...CVE-2014-3522Fix available4.0 Medium
- serf project serf, apache subversion, canonical ubuntu linux +2 moreThe (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate...CVE-2014-3504Fix available4.0 Medium
- apache subversion, apple xcode, canonical ubuntu linux +6 more +8 moreApache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of...CVE-2014-3528Fix available4.0 Medium
- apache subversionThe daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges...CVE-2013-7393Fix available2.4 Low
- apache subversionsvnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in...CVE-2013-4262Fix available2.4 Low
- apache http serverMemory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the...CVE-2014-3523EPSS 16.8%5.0 Medium
- apache http serverThe cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...CVE-2013-4352Fix availableEPSS 11.5%4.3 Medium
- apache http serverThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...CVE-2014-0231Fix availableEPSS 44.7%5.0 Medium
- apache http server, debian linux, oracle enterprise manager ops center +2 more +4 moreRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...CVE-2014-0226Public exploitFix availableEPSS 85.8%6.8 Medium
- apache http server, debian linux, redhat jboss enterprise application platform +2 moreThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...CVE-2014-0118Fix availableEPSS 37.3%4.3 Medium
- apache http server, apple mac os x +1 moreThe mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is...CVE-2014-0117Fix availableEPSS 35.7%4.3 Medium
- apache syncopeApache Syncope uses a weak PNRGCVE-2014-3503Fix available5.0 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreCleartext Transmission of Sensitive Information in Apache CXFCVE-2014-0035Fix available4.3 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreImproper Input Validation in Apache CXFCVE-2014-0034Fix available4.3 Medium
- apache strutsImproper Input Validation in Apache StrutsCVE-2015-0899Fix availableEPSS 21.3%7.5 High
- apache ofbizMultiple cross-site scripting (XSS) vulnerabilities in Apache Open For Business Project (aka...CVE-2012-16214.3 Medium
- apache myfacesApache MyFaces Vulnerable to Path TraversalCVE-2011-4367Public exploitFix availableEPSS 33.7%5.0 Medium
- apache tomcatDenial of service in Apache TomcatCVE-2014-0095Fix available5.0 Medium
- apache tomcatMissing XML Validation in Apache TomcatCVE-2014-0119Fix available4.3 Medium
- apache tomcatImproper Neutralization of CRLF Sequences in HTTP Headers in Apache TomcatCVE-2014-0099Fix available4.3 Medium
- apache tomcatImproper Input Validation in Apache TomcatCVE-2014-0096Fix available4.3 Medium
- apache tomcatInteger Overflow or Wraparound in Apache TomcatCVE-2014-0075Public exploitFix availableEPSS 17.6%5.0 Medium
- apache hbaseApache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are...CVE-2013-21934.3 Medium
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...CVE-2013-27585.0 Medium
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...CVE-2013-27565.0 Medium
- Show moreLoading…