Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache wicketMultiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2)...CVE-2015-75206.1 Medium
- apache wicketCross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache...CVE-2015-5347Public exploit6.1 Medium
- apache strutsCross-site Scripting in Apache StrutsCVE-2016-4003Fix availableEPSS 11.6%6.1 Medium
- apache strutsApache Struts XSS VulnerabilityCVE-2016-2162Fix available6.1 Medium
- apache strutsApache Struts RCE VulnerabilityCVE-2016-0785Fix available8.8 High
- apache ofbizApache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to...CVE-2016-2170EPSS 12.7%9.8 Critical
- apache qpid proton, fedoraproject fedora +1 moreModerate severity vulnerability that affects org.apache.qpid:proton-jCVE-2016-2166Fix available6.5 Medium
- apache rangerThe Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a passwordCVE-2016-0733Fix available9.8 Critical
- apache rangerApache Ranger allows users to bypass intended access restrictions via the REST APICVE-2015-5167Fix available6.5 Medium
- apache ofbizCross-site scripting (XSS) vulnerability in the DisplayEntityField.getDescription method in...CVE-2015-32686.1 Medium
- apache directory studio, ldap studio +1 moreApache Directory Studio Command InjectionCVE-2015-5349Fix available7.8 High
- apache rangerApache Ranger Access Restriction BypassCVE-2016-0735Fix available8.8 High
- apache rangerApache Ranger allows users to bypass intended access restrictions via direct access to module URLsCVE-2015-0266Fix available7.1 High
- apache rangerApache Ranger Cross-site Scripting vulnerabilityCVE-2015-0265Fix available6.1 Medium
- apache jetspeedThe User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using...CVE-2016-2171EPSS 42.7%7.5 High
- apache openmeetingsApache OpenMeetings allows remote attackers to read arbitrary files by attempting to upload a fileCVE-2016-2164Fix available7.5 High
- apache openmeetingsApache OpenMeetings Cross-site Scripting vulnerabilityCVE-2016-2163Fix available6.1 Medium
- apache openmeetingsApache OpenMeetings Directory Traversal vulnerabilityCVE-2016-0784Public exploitFix availableEPSS 54.7%6.5 Medium
- apache openmeetingsThe sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password...CVE-2016-07837.5 High
- apache jetspeedCross-site Scripting in Apache JetspeedCVE-2016-0712Fix available6.1 Medium
- apache jetspeedApache Jetspeed vulnerable to Cross-site ScriptingCVE-2016-0711Fix available6.1 Medium
- apache jetspeedApache Jetspeed vulnerable to SQL InjectionCVE-2016-0710Public exploitFix availableEPSS 52.4%8.8 High
- apache jetspeedPath Traversal in Apache JetspeedCVE-2016-0709Public exploitFix availableEPSS 77.5%7.2 High
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2016-0734Fix available6.1 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Verification of Source of a Communication Channel in Apache TomcatCVE-2016-0763Fix availableEPSS 11.3%6.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Access Control in Apache TomcatCVE-2016-0714Public exploitFix availableEPSS 13.1%8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2016-0706Fix available4.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreApache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a tokenCVE-2015-5351Fix available8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2015-5346Fix availableEPSS 10.6%8.1 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5345Fix availableEPSS 18.4%5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5174Fix availableEPSS 12.6%4.3 Medium
- apache solrImproper Neutralization of Input During Web Page Generation in Apache SolrCVE-2015-8797Fix available6.1 Medium
- apache solrApache Solr Cross-site scripting VulnerabilityCVE-2015-8796Fix available6.1 Medium
- apache solrImproper Neutralization of Input During Web Page Generation in Apache SolrCVE-2015-8795Fix available6.1 Medium
- adobe experience manager, apache sling +1 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Sling Servlets PostCVE-2016-0956Public exploitFix availableEPSS 51.2%7.5 High
- apache cloudstackApache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM...CVE-2015-32529.8 Critical
- apache cloudstackApache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain...CVE-2015-32514.9 Medium
- apache camelCamel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commandsCVE-2015-5344Fix available9.8 Critical
- apache hiveHigh severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-serviceCVE-2015-7521Fix available8.3 High
- apache activemq, fedoraproject fedora, redhat openshift +2 moreImproper Input Validation in Apache ActiveMQCVE-2015-5254Public exploitFix availableEPSS 38.2%9.8 Critical
- apache hadoopThe Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and...CVE-2015-74308.4 High
- apache hbase, ibm infosphere biginsights +1 moreHigh severity vulnerability that affects org.apache.hbase:hbaseCVE-2015-1836Fix available7.3 High
- apache hive, ibm infosphere biginsights +1 moreImproper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-serviceCVE-2015-1772Fix available7.3 High
- apache cordova file transferCRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file...CVE-2015-52044.3 Medium
- apache commons collectionsInsecure Deserialization in Apache Commons CollectionCVE-2015-6420Public exploitFix availableEPSS 24.2%9.8 Critical
- apache subversion, debian linux +1 moreInteger overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1...CVE-2015-5343Fix availableEPSS 30.2%7.6 High
- apache subversionInteger overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9...CVE-2015-5259Fix availableEPSS 57.0%8.6 High
- apache cordovaApache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data,...CVE-2015-83205.0 Medium
- apache cordovaApache Cordova-Android before 4.1.0, when an application relies on a remote server, improperly...CVE-2015-52564.3 Medium
- apache cxfImproper Access Control in Apache CXFCVE-2015-5253Fix available4.0 Medium
- Show moreLoading…