Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache ambariApache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a...CVE-2015-49402.1 Low
- apache ambariApache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes...CVE-2015-49284.3 Medium
- apache ambariApache Ambari Open RedirectCVE-2015-5210Fix available5.8 Medium
- apache ambariApache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain...CVE-2015-32706.5 Medium
- apache ambariCross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote...CVE-2015-31863.5 Low
- apache ambariApache Ambari SSRF VulnerabilityCVE-2015-1775Fix available5.5 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreLibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote...CVE-2015-5214Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote...CVE-2015-5213Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the...CVE-2015-5212Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreLibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode...CVE-2015-4551Fix availableEPSS 13.8%4.3 Medium
- apache httpclient, canonical ubuntu linux, fedoraproject fedora +2 moreDenial of service vulnerability in org.apache.httpcomponents:httpclientCVE-2015-5262Fix availableEPSS 18.8%4.3 Medium
- apache activemq, fedoraproject fedora +1 moreImproper Input Validation in Apache ActiveMQCVE-2015-6524Fix available5.0 Medium
- apache activemqImproper Authentication in Apache WSS4JCVE-2014-3612Fix available7.5 High
- apache tapestryApache Tapestry Unsafe Object StorageCVE-2014-1972Fix available7.8 High
- apache activemqImproper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQCVE-2015-1830Public exploitFix availableEPSS 84.4%5.0 Medium
- apache activemq, oracle business intelligence publisher, fusion middleware +2 moreImproper Neutralization of Special Elements used in an OS Command in Apache ActiveMQCVE-2014-3576Public exploitFix availableEPSS 12.8%7.5 High
- apache subversion, apple xcode +1 moreThe svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1...CVE-2015-3187Fix available4.0 Medium
- apache subversion, apple xcode +1 moremod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache...CVE-2015-3184Fix available5.0 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not...CVE-2015-0253EPSS 12.8%5.0 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...CVE-2015-3185Fix availableEPSS 16.3%4.3 Medium
- apache http serverThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...CVE-2015-3183Fix availableEPSS 74.4%5.0 Medium
- apache groovy, oracle health sciences clinical development center, retail order broker cloud service +3 more +5 moreImproper Neutralization of Special Elements in Output Used by a Downstream Component in Apache GroovyCVE-2015-3253Fix availableEPSS 41.0%9.8 Critical
- apache strutsIncomplete exclude pattern in Apache StrutsCVE-2015-1831Fix available7.5 High
- apache camelApache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile objectCVE-2015-0264Fix available5.0 Medium
- apache camelApache Camel XML External Entity vulnerabilityCVE-2015-0263Fix available5.0 Medium
- apache sling api, sling servlets post +1 moreImproper Neutralization of Input During Web Page Generation in Apache SlingCVE-2015-2944Fix available4.3 Medium
- apache jackrabbitImproper Input Validation in Apache JackrabbitCVE-2015-1833Public exploitFix availableEPSS 55.9%6.4 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +5 more +7 moreThe HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4...CVE-2015-1774Fix available6.8 Medium
- apache tomcat connectorsApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...CVE-2014-8111Fix available5.0 Medium
- apache flexCross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14...CVE-2015-17734.3 Medium
- apache cassandraImproper Neutralization of Special Elements used in a Command in Apache CassandraCVE-2015-0225Fix available7.5 High
- apache subversion, opensuse +1 moreThe mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a...CVE-2015-0202Fix available7.8 High
- apache batik, canonical ubuntu linux, redhat jboss enterprise brms platform +2 moreImproper Input Validation in Apache BatikCVE-2015-0250Fix availableEPSS 16.6%6.4 Medium
- apache mod-gnutlsThe authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate...CVE-2015-2091Fix available5.0 Medium
- apache xerces-c\+\+, debian linux, fedoraproject fedora +2 moreinternal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial...CVE-2015-0252Public exploitFix availableEPSS 38.7%5.0 Medium
- apache standard taglibs, canonical ubuntu linux +1 moreXXE in Apache Standard TaglibsCVE-2015-0254Fix availableEPSS 12.0%7.5 High
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...CVE-2015-0228Fix availableEPSS 16.9%5.0 Medium
- apache wss4jImproper Access Control in Apache WSS4JCVE-2015-0227Fix available5.0 Medium
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2014-8110Public exploitFix available4.3 Medium
- apache qpidUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...CVE-2015-02235.0 Medium
- apache santuario xml security for javaImproper Input Validation in Apache Santuario XML SecurityCVE-2014-8152Fix available5.0 Medium
- apache cloudstackApache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private...CVE-2014-95935.0 Medium
- apache traffic serverApache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via...CVE-2014-10022Fix available5.0 Medium
- apache poi, fedoraproject fedora +1 moreLoop with Unreachable Exit Condition in Apache POICVE-2014-9527Fix available5.0 Medium
- apache solrImproper Neutralization of Input During Web Page Generation in Apache SolrCVE-2014-3628Fix available4.3 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +1 more +3 moremod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not...CVE-2014-8109Fix availableEPSS 22.0%4.3 Medium
- apache http server, apple mac os x, os x server +1 more +3 moreThe handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP...CVE-2014-3583Fix availableEPSS 10.8%5.0 Medium
- apache strutsCross-Site Request Forgery in Apache StrutsCVE-2014-7809Fix available6.8 Medium
- apache cloudstackApache CloudStack 4.3.x before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to bypass...CVE-2014-78075.0 Medium
- apache hadoopImproper Link Resolution Before File Access in Apache HadoopCVE-2014-3627Fix available5.0 Medium
- Show moreLoading…