Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache brooklynDeserialization of Untrusted Data in Apache BrooklynCVE-2016-8744Fix available8.8 High
- apache brooklynApache Brooklyn is vulnerable to cross-site request forgery (CSRF)CVE-2016-8737Fix available8.8 High
- apache traffic serverUnspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3...CVE-2015-5206Fix available9.8 Critical
- apache traffic serverUnspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x...CVE-2015-5168Fix available9.8 Critical
- apache directory ldap apiExposure of Sensitive Information to an Unauthorized Actor in Apache Directory LDAP APICVE-2015-3250Fix available7.5 High
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Apache HadoopCVE-2016-3086Fix available9.8 Critical
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Apache HadoopCVE-2016-5001Fix available5.5 Medium
- apache ofbizThe default configuration of the Apache OFBiz framework offers a blog functionality. Different...CVE-2016-68006.1 Medium
- apache ofbizBy manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid...CVE-2016-44628.8 High
- apache atlasCross-site Scripting in Apache AtlasCVE-2017-3155Fix available6.1 Medium
- apache atlasApache Atlas produces Stack trace in error responseCVE-2017-3154Fix available7.5 High
- apache atlasCross-site Scripting in Apache AtlasCVE-2017-3153Fix available6.1 Medium
- apache atlasCross-site Scripting in Apache AtlasCVE-2017-3152Fix available6.1 Medium
- apache atlasCross-site Scripting in Apache AtlasCVE-2017-3151Fix available6.1 Medium
- apache atlasInsecure cookie storage in Apache AtlasCVE-2017-3150Fix available6.1 Medium
- apache atlasPath Traversal in Apache AtlasCVE-2016-8752Fix available7.5 High
- apache strutsSpecial top object can be used to access Struts' internalsCVE-2015-5209Fix available7.5 High
- apache pony mailApache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.CVE-2016-44609.8 Critical
- apache sling servlets postImproper Neutralization of Input During Web Page Generation Apache Sling Servlets PostCVE-2017-9802Fix available6.1 Medium
- apache tomcatImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2017-7675Fix availableEPSS 10.1%7.5 High
- apache tomcatImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2016-6817Fix available7.5 High
- apache cxfCovert Timing Channel in Apache CXFCVE-2017-3156Fix available7.5 High
- apache cxfImproper Restriction of XML External Entity Reference in Apache CXF JAX-RSCVE-2016-8739Fix available7.5 High
- apache cxfImproper Neutralization of Input During Web Page Generation in Apache CXFCVE-2016-6812Public exploitFix available6.1 Medium
- apache subversionA maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x...CVE-2017-9800Fix availableEPSS 18.9%9.8 Critical
- apache tomcatInsufficient Verification of Data Authenticity in Apache TomcatCVE-2017-7674Fix available4.3 Medium
- apache stormApache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, userCVE-2017-9799Fix available8.8 High
- apache xerces-c\+\+Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a...CVE-2012-08807.5 High
- apache cxfImproper Authentication in Apache CXFCVE-2012-0803Fix available9.8 Critical
- apache myfacesApache MyFaces Vulnerable to EL InjectionCVE-2011-4343Fix available7.5 High
- apache winkXML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers...CVE-2010-22457.4 High
- apache commons emailImproper Input Validation in Apache Commons EmailCVE-2017-9801Fix available7.5 High
- apache solrImproper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-coreCVE-2017-3163Fix available7.5 High
- apache http serverA maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4...CVE-2017-7659Fix availableEPSS 53.9%7.5 High
- apache slingXML External Entity Reference in Apache SlingCVE-2016-6798Public exploitFix available9.8 Critical
- apache slingCross site scripting in Apache SlingCVE-2016-5394Public exploitFix available6.1 Medium
- apache wicketThe DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote...CVE-2016-67939.1 Critical
- apache rollerThe weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users...CVE-2015-02497.2 High
- apache openmeetingsApache OpenMeetings updates user password in insecure mannerCVE-2017-7688Fix available7.5 High
- apache openmeetingsApache OpenMeetings responds to insecure HTTP methodsCVE-2017-7685Fix available5.3 Medium
- apache openmeetingsApache OpenMeetings vulnerable to Uncontrolled Resource ConsumptionCVE-2017-7684Fix available7.5 High
- apache openmeetingsApache OpenMeetings displays Tomcat version and detailed error stack traceCVE-2017-7683Fix available7.5 High
- apache openmeetingsApache OpenMeetings vulnerable to parameter manipulation attacksCVE-2017-7682Fix available8.2 High
- apache openmeetingsApache OpenMeetings vulnerable to SQL injectionCVE-2017-7681Fix available8.8 High
- apache openmeetingsApache OpenMeetings allows flash content to be loaded from untrusted domainsCVE-2017-7680Fix available7.5 High
- apache openmeetingsApache OpenMeetings has Inadequate Encryption StrengthCVE-2017-7673Fix available9.8 Critical
- apache openmeetingsApache OpenMeetings vulnerable to Cross-Site Request ForgeryCVE-2017-7666Fix available8.8 High
- apache openmeetingsApache OpenMeetings does not correctly validate uploaded XML documentsCVE-2017-7664Fix available10.0 Critical
- apache openmeetingsApache OpenMeetings Cross-site Scripting vulnerabilityCVE-2017-7663Fix available6.1 Medium
- apache http serverWhen under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26...CVE-2017-9789Fix available7.5 High
- Show moreLoading…