Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache tomcatExposure of Resource to Wrong Sphere in Apache TomcatCVE-2017-5648Fix availableEPSS 13.2%9.1 Critical
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2017-5647Fix availableEPSS 16.8%7.5 High
- netty, apache cassandra, redhat jboss data grid +1 more +3 moreLoop with Unreachable Exit Condition in NettyCVE-2016-4970Fix availableEPSS 11.3%7.5 High
- apache tomcat jk connectorBuffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.CVE-2016-6808EPSS 22.7%9.8 Critical
- apache tomeeThe EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote...CVE-2016-07799.8 Critical
- apache hadoopInsecure Inherited Permissions in Apache HadoopCVE-2016-6811Fix available8.8 High
- apache igniteModerate severity vulnerability that affects org.apache.ignite:ignite-coreCVE-2016-6805Fix available5.9 Medium
- apache tika, nutch +1 moreApache Tika allows Java code execution for serialized objects embedded in MATLAB filesCVE-2016-6809Fix available9.8 Critical
- apache geodeApache Geode information disclosure vulnerabilityCVE-2017-5649Fix available7.5 High
- apache ambariDuring installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with...CVE-2017-56429.8 Critical
- apache ambariApache Ambari reveals administrator passwordsCVE-2016-4976Fix available5.5 Medium
- apache ambariIn Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the...CVE-2014-35829.8 Critical
- apache ambariApache Ambari Improper Access ControlCVE-2016-6807Fix available9.8 Critical
- apache camelApache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacksCVE-2016-8749Fix availableEPSS 10.6%9.8 Critical
- apache poiImproper Restriction of Recursive Entity References in DTDs in Apache POICVE-2017-5644Fix available5.5 Medium
- apache hadoop, cloudera cdh +1 moreImproper Authentication in Apache HadoopCVE-2014-0229Fix available6.5 Medium
- apache camelApache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.CVE-2017-5643Fix available7.4 High
- apache tomcat, netapp oncommand insight, oncommand shift +2 moreApache Tomcat allows remote attackers to read data that was intended to be associated with a different requestCVE-2016-8747Fix available7.5 High
- apache struts, arubanetworks clearpass policy manager, hp server automation +6 more +8 moreApache Struts vulnerable to remote arbitrary command execution due to improper input validationCVE-2017-5638In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apache camelApache Camel's camel-snakeyaml component is vulnerable to Java object de-serializationCVE-2017-3159Fix available9.8 Critical
- apache openoffice, debian linux, redhat enterprise linux desktop +5 more +7 moreBy exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could...CVE-2017-3157Fix available5.5 Medium
- apache guacamoleCross-site scripting (XSS) vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when...CVE-2016-15665.4 Medium
- apache groovy, redhat enterprise linux server +1 moreDeserialization of Untrusted Data in GroovyCVE-2016-6814Fix availableEPSS 17.2%9.8 Critical
- apache groovy ldapmain/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows...CVE-2016-64977.5 High
- apache stormApache Storm remote code execution vulnerabilityCVE-2015-3188Fix availableEPSS 14.4%9.8 Critical
- apache tomcatConcurrent Execution using Shared Resource with Improper Synchronization in Apache TomcatCVE-2016-8745Fix availableEPSS 16.0%7.5 High
- apache http server, debian linux, netapp clustered data ontap +8 more +10 moreApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 High
- apache http serverIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...CVE-2016-2161Fix availableEPSS 21.0%7.5 High
- apache http serverIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...CVE-2016-0736Public exploitFix availableEPSS 49.0%7.5 High
- apache tikaApache Tika Server exposes sensitive informationCVE-2015-3271Fix available5.3 Medium
- apache http serverThe mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols...CVE-2016-8740Public exploitFix availableEPSS 79.1%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6...CVE-2016-9774Fix available7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0...CVE-2016-9775Fix available7.8 High
- apache subversion, debian linux +1 moreApache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0...CVE-2016-8734Fix available6.5 Medium
- apache hadoopImproper Access Control in Apache HadoopCVE-2016-5393Fix available8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 moreApache Tomcat Improper Access Control vulnerabilityCVE-2016-8735In KEVFix availableEPSS 90.3%9.8 Critical
- apache tomcatImproper Input Validation in Apache TomcatCVE-2016-6816Public exploitFix availableEPSS 39.6%7.1 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreSystem Property Disclosure in Apache TomcatCVE-2016-6794Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018Fix availableEPSS 10.3%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache TomcatCVE-2016-0762Fix available5.9 Medium
- apache commons fileuploadImproper Access Control in commons-fileuploadCVE-2016-1000031Fix availableEPSS 32.7%9.8 Critical
- apache tomcatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and...CVE-2016-63257.8 High
- apache tomcatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and...CVE-2016-5425Public exploit7.8 High
- apache derbyImproper Restriction of XML External Entity Reference in Apace DerbyCVE-2015-1832Fix availableEPSS 12.2%9.1 Critical
- apache myfaces trinidadApache MyFaces Trinidad Deserialization VulnerabilityCVE-2016-5019Fix available9.8 Critical
- apache strutsApache Struts improper action name cleanupCVE-2016-4436Fix available9.8 Critical
- apache artemis, redhat jboss enterprise application platform +1 moreApache ActiveMQ Artemis RCE Via Deserialization Gadget ChainCVE-2016-4978Fix available7.2 High
- apache rangerApache Ranger allows remote authenticated administrators to inject arbitrary web script or HTMLCVE-2016-5395Fix available4.8 Medium
- Show moreLoading…