Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache shiroImproper Access Control in Apache ShiroCVE-2016-6802Fix available7.5 High
- apache jackrabbit, debian linux +1 moreApache Jackrabbit Authentication Hijacking VulnerabilityCVE-2016-6801Fix available8.8 High
- apache zookeeperBuffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when...CVE-2016-5017Fix available8.1 High
- apache tomcatThe Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8...CVE-2016-1240Public exploitFix available7.8 High
- apache openmeetingsApache OpenMeetings Cross-site Scripting vulnerabilityCVE-2016-3089Fix available6.1 Medium
- apache sentryMultiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote...CVE-2016-07608.8 High
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2016-0782Fix available5.4 Medium
- apache poiApache POI's XLSX2CSV Example XML External Entity (XXE) VulnerabilityCVE-2016-5000Fix available5.5 Medium
- apache openofficeThe Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial...CVE-2016-1513Fix available7.8 High
- apache archivaApache Archiva vulnerable to Cross-site ScriptingCVE-2016-5005Fix available4.8 Medium
- apache archivaMultiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier...CVE-2016-4469Public exploit8.8 High
- perl, apache spamassassin, debian linux +2 more +4 more(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin...CVE-2016-1238Fix available7.8 High
- apache mod fcgid, opensuse leap, opensuse +2 moreA security Bypass vulnerability exists in mod_fcgid through 2016-07-07 in the FcgidPassHeader Proxy.CVE-2016-1000104Fix available8.8 High
- apache tomcat, hp system management homepage, oracle linux +8 more +10 moreImproper Access Control in Apache TomcatCVE-2016-5388Fix availableEPSS 50.9%8.1 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- apache amqp 0-x jms client, jms client amqp +1 moreImproper Input Validation in Apache Qpid AMQP 0-x JMSCVE-2016-4974Fix available7.5 High
- apache http serverThe Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not...CVE-2016-4979Fix availableEPSS 18.8%7.5 High
- apache http serverThe Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of...CVE-2016-1546Fix availableEPSS 15.9%5.9 Medium
- apache cxf fedizHigh severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2CVE-2016-4464Fix available9.8 Critical
- apache strutsApache Struts vulnerable to possible DoS attack when using URLValidatorCVE-2016-4465Fix availableEPSS 10.4%5.3 Medium
- apache strutsArbitrary code execution in Apache Struts 2CVE-2016-4438Public exploitFix availableEPSS 16.7%9.8 Critical
- apache strutsApache Struts Open RedirectCVE-2016-4433Fix available7.5 High
- apache strutsApache Struts Access Control RedirectCVE-2016-4431Fix available7.5 High
- apache strutsApache Struts CSRF VulnerabilityCVE-2016-4430Fix available8.8 High
- apache strutsImproper Input Validation in Apache StrutsCVE-2016-1182EPSS 25.7%8.2 High
- apache struts, oracle banking platform, portal +2 moreImproper Input Validation in Apache StrutsCVE-2016-1181EPSS 12.7%8.1 High
- apache xerces-c\+\+, debian linux +1 moreStack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers...CVE-2016-4463Public exploitFix availableEPSS 14.2%7.5 High
- apache commons fileupload, tomcat, canonical ubuntu linux +3 more +5 moreHigh severity vulnerability that affects commons-fileupload:commons-fileuploadCVE-2016-3092Fix availableEPSS 37.2%7.5 High
- apache rangerSQL injection vulnerability in the policy admin tool in Apache RangerCVE-2016-2174Fix available7.2 High
- apache cloudstackApache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x...CVE-2016-30856.5 Medium
- apache struts, ognl project ognl +1 moreDenial of service in Apache StrutsCVE-2016-3093Fix available5.3 Medium
- apache strutsApache Struts vulnerable to arbitrary remote code execution due to improper input validationCVE-2016-3087Public exploitFix availableEPSS 81.9%9.8 Critical
- apache shiro, aurora, redhat fuse +1 more +3 moreImproper Access Control in Apache ShiroCVE-2016-4437In KEVPublic exploitFix availableEPSS 93.0%9.8 Critical
- apache james serverApache James Server OS Command InjectionCVE-2015-7611Public exploitFix availableEPSS 68.6%8.1 High
- apache qpid broker-jAMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authenticationCVE-2016-4432Fix available9.1 Critical
- apache qpid broker-jImproper Input Validation in org.apache.qpid:qpid-brokerCVE-2016-3094Fix available5.9 Medium
- apache activemqImproper Input Validation in Apache ActiveMQCVE-2016-3088In KEVPublic exploitFix availableEPSS 98.4%9.8 Critical
- apache pdfbox, debian linux +1 moreHigh severity vulnerability that affects org.apache.pdfbox:pdfboxCVE-2016-2175Fix available7.8 High
- apache ambariThe File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to...CVE-2016-07314.9 Medium
- apache ambariThe agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent...CVE-2016-07073.3 Low
- apache xerces-c\+\+, opensuse +1 moreUse-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and...CVE-2016-2099Fix available9.8 Critical
- apache cordovaApache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.CVE-2015-52084.4 Medium
- apache cordovaApache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection...CVE-2015-52075.3 Medium
- apache subversionThe req_check_access function in the mod_authz_svn module in the httpd server in Apache...CVE-2016-2168Fix availableEPSS 20.7%6.5 Medium
- apache subversionThe canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16...CVE-2016-2167Fix available6.8 Medium
- apache strutsRemote Code Execution in Apache StrutsCVE-2016-3082Fix availableEPSS 19.2%9.8 Critical
- apache struts, huawei agile controller-campus firmware, anyoffice +17 more +19 moreApache Struts RCE VulnerabilityCVE-2016-3081In KEVPublic exploitFix availableEPSS 96.9%8.1 High
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-3427In KEVFix availableEPSS 92.3%9.8 Critical
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Apache HadoopCVE-2015-1776Fix available6.2 Medium
- apache camelApache Camel can allow remote attackers to execute arbitrary commandsCVE-2015-5348Fix available8.1 High
- Show moreLoading…