Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache strutsSpring AOP functionality (Struts) vulnerable to DoS attackCVE-2017-9787Fix availableEPSS 10.6%7.5 High
- apache strutsApache Struts Improper Input Validation vulnerabilityCVE-2017-7672Fix available5.9 Medium
- apache http server, apple mac os x, debian linux +12 more +14 moreIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...CVE-2017-9788Fix availableEPSS 56.8%9.1 Critical
- apache sparkModerate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11CVE-2017-7678Fix available6.1 Medium
- apache impalaDuring a routine security analysis, it was found that one of the ports in Apache Impala ...CVE-2017-56527.5 High
- apache impalaIt was noticed that a malicious process impersonating an Impala daemon in Apache Impala ...CVE-2017-56409.8 Critical
- apache traffic controlApache Traffic Control vulnerable to Slowloris-style Denial of Service attackCVE-2017-7670Fix available7.5 High
- apache struts, struts 1 +1 moreCode execution in Apache Struts 1 pluginCVE-2017-9791In KEVPublic exploitEPSS 98.9%9.8 Critical
- apache solrApache Solr insecure inter-node communicationCVE-2017-7660Fix available7.5 High
- apache igniteApache Ignite communicates to an external PHP server where sensitive information is sentCVE-2017-7686Fix available7.5 High
- apache http serverIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...CVE-2017-7679Public exploitFix availableEPSS 39.3%9.8 Critical
- apache http server, apple mac os x, debian linux +10 more +12 moreThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...CVE-2017-7668Fix availableEPSS 57.5%7.5 High
- apache http serverIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...CVE-2017-3169Fix availableEPSS 20.0%9.8 Critical
- apache http server, apple mac os x, debian linux +11 more +13 moreIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...CVE-2017-3167Fix availableEPSS 20.2%9.8 Critical
- apache thriftThe client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to...CVE-2015-32546.5 Medium
- apache rangerModerate severity vulnerability that affects org.apache.ranger:rangerCVE-2017-7677Fix available5.9 Medium
- apache rangerPolicy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard characterCVE-2017-7676Fix available9.8 Critical
- apache rangerApache Ranger admin users can store some arbitrary javascript code to be executed when normal users login and access policiesCVE-2016-8751Fix available4.8 Medium
- apache rangerApache Ranger policy engine incorrectly matches paths in certain conditionsCVE-2016-8746Fix available5.9 Medium
- apache nifiOrigin Validation Error in Apache NiFiCVE-2017-7667Fix available7.5 High
- apache nifiCross-site Scripting in Apache NiFiCVE-2017-7665Fix available6.1 Medium
- apache cxf fedizApache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacksCVE-2015-5175Fix availableEPSS 10.9%7.5 High
- apache ws-xmlrpcws-xmlrpc DoS VulnerabilityCVE-2016-50046.5 Medium
- apache tomcatImproper Handling of Exceptional Conditions in Apache TomcatCVE-2017-5664Fix availableEPSS 16.6%7.5 High
- apache hadoopApache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validationCVE-2017-7669Fix available7.5 High
- apache zookeeper, debian linux +1 moreUncontrolled Resource Consumption in Apache ZooKeeperCVE-2017-5637Public exploitFix availableEPSS 73.1%7.5 High
- apache hiveorg.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate ValidationCVE-2016-3083Fix available7.5 High
- apache knoxApache Knox allows impersonation of usersCVE-2017-5646Fix available6.8 Medium
- apache archivaApache Archiva vulnerable to Cross Site Request ForgeryCVE-2017-5657Fix available8.0 High
- flexera software llc gnutls libtasn1, gnu libtasn1, apache bookkeeper +1 more +3 moreTwo errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4...CVE-2017-6891Fix available8.8 High
- apache juddiModerate severity vulnerability that affects org.apache.juddi:juddi-clientCVE-2015-5241Fix available6.1 Medium
- apache cxf fedizCross-Site Request Forgery in Apache CXF FedizCVE-2017-7662Fix available8.8 High
- apache cxf fedizModerate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2CVE-2017-7661Fix available8.8 High
- apache ambariIn Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary...CVE-2017-56556.5 Medium
- apache qpid broker-jExposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for JavaCVE-2016-8741Fix available7.5 High
- apache ambariIn Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may...CVE-2017-56547.5 High
- apache cordova, apache software foundation cordova android +1 moreInformation Exposure in cordova-androidCVE-2016-6799Fix available7.5 High
- apache qpid protonThe C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on...CVE-2016-44675.9 Medium
- apache hadoopImproper Input Validation in Apache HadoopCVE-2017-3162Fix available7.3 High
- apache hadoopImproper Neutralization of Input During Web Page Generation in Apache HadoopCVE-2017-3161Fix available6.1 Medium
- apache activemq, redhat jboss a-mq, jboss fuse +2 moreImproper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQCVE-2015-7559Fix available2.7 Low
- apache cxfSession Fixation in Apache CXFCVE-2017-5656Fix available7.5 High
- apache cxfImproper Certificate Validation in Apache CXFCVE-2017-5653Fix availableEPSS 11.2%5.3 Medium
- apache batikImproper Restriction of XML External Entity Reference in Apache BatikCVE-2017-5662Fix available7.3 High
- apache software foundation fop, apache formatting objects processor +1 moreImproper Restriction of XML External Entity Reference in Apache FOPCVE-2017-5661Fix available7.3 High
- apache log4j, netapp oncommand api services, oncommand insight +76 more +78 moreDeserialization of Untrusted Data in Log4jCVE-2017-5645Public exploitFix availableEPSS 89.4%9.8 Critical
- apache traffic serverApache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content...CVE-2017-5659Fix available7.5 High
- apache traffic serverApache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.CVE-2016-5396Fix available7.5 High
- apache tomcatExpected Behavior Violation in Apache TomcatCVE-2017-5651Fix available9.8 Critical
- apache tomcatImproper Resource Shutdown or Release in Apache TomcatCVE-2017-5650Fix available7.5 High
- Show moreLoading…