Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 moreSpring Data Commons remote code injection vulnerabilityCVE-2018-1273In KEVPublic exploitFix availableEPSS 97.0%9.8 Critical
- apache solr, debian linux +1 moreThere is a XML external entity expansion (XXE) vulnerability in Apache SolrCVE-2018-1308Fix availableEPSS 20.8%7.5 High
- apache hiveIncorrect Permission Assignment for Critical Resource in Apache hiveCVE-2018-1315Fix available3.7 Low
- apache hiveExposure of Sensitive Information to an Unauthorized Actor in Apache hiveCVE-2018-1284Fix available3.7 Low
- apache hiveSQL Injection in hive-jdbcCVE-2018-1282Fix available9.1 Critical
- apache igniteApache serialization mechanism does not have a list of classes allowed for serialization/deserializationCVE-2018-1295Fix available9.8 Critical
- apache strutsApache Struts REST Plugin can potentially allow a DoS attackCVE-2018-1327Fix available7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...CVE-2018-1312Fix availableEPSS 15.8%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +4 more +6 moreA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...CVE-2018-1303Fix availableEPSS 69.8%7.5 High
- apache http server, canonical ubuntu linux, netapp clustered data ontap +3 more +5 moreWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...CVE-2018-1302Fix availableEPSS 12.9%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...CVE-2018-1301Fix availableEPSS 14.5%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...CVE-2018-1283Fix available5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...CVE-2017-15715Public exploitFix availableEPSS 86.2%8.1 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...CVE-2017-15710Fix availableEPSS 17.5%7.5 High
- apache syncopeExposure of Sensitive Information to an Unauthorized Actor in Apache syncope-copeCVE-2018-1322Public exploitFix availableEPSS 19.9%4.9 Medium
- apache syncopeHigh severity vulnerability that affects org.apache.syncope:syncope-coreCVE-2018-1321Public exploitFix availableEPSS 17.5%7.2 High
- apache commons compress, oracle mysql cluster, weblogic server +2 moreApache Commons Compress vulnerable to denial of service due to infinite loopCVE-2018-1324Public exploitFix available5.5 Medium
- apache alluraIn Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If...CVE-2018-13196.1 Medium
- apache tomcat jk connector, apache software foundation tomcat connectors +1 moreThe IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that...CVE-2018-1323EPSS 46.8%7.5 High
- apache http server, netapp storage automation store, red hat, inc. mod cluster +1 more +3 moreApache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input...CVE-2016-86124.3 Medium
- apache artemis, redhat hornetq, red hat, inc. hornetq/artemis +1 more +3 moreUncontrolled Resource Consumption in Artemis and HornetQCVE-2017-12174Fix available7.5 High
- apache odeApache ODE Path Traversal vulnerabilityCVE-2018-1316Fix available7.5 High
- apache xerces-c\+\+, apache software foundation xerces c++ +1 moreIn Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result...CVE-2017-12627Fix available9.8 Critical
- apache openmeetingsApache OpenMeetings may allow authenticated attacker to deny service for privileged usersCVE-2018-1286Fix available6.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +7 more +9 moreApache Tomcat unauthorized access vulnerabilityCVE-2018-1304Public exploitFix availableEPSS 17.1%5.9 Medium
- apache traffic server, debian linux +1 moreThere is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0...CVE-2017-7671Fix available7.5 High
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with...CVE-2017-5660Fix available8.6 High
- apache hupaApache James Hupa Webmail application Cross-site Scripting VulnerabilitiesCVE-2012-3536Fix available6.1 Medium
- apache geodeApache Geode unsafe deserialization of application objectsCVE-2017-15693Fix available7.5 High
- apache geodeApache Geode unsafe deserialization in TcpServerCVE-2017-15692Fix available9.8 Critical
- apache geodeApache Geode configuration request authorization vulnerabilityCVE-2017-15696Fix available7.5 High
- apache commons emailImproper Input Validation Apache Commons EmailCVE-2018-1294Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreApache Tomcat information exposure vulnerabilityCVE-2018-1305Public exploitFix availableEPSS 14.5%6.5 Medium
- apache qpidThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...CVE-2015-02036.5 Medium
- apache vclThe Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x...CVE-2013-02678.8 High
- apache juddiThe console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote...CVE-2009-42676.5 Medium
- apache karafModerate severity vulnerability that affects org.apache.karaf:apache-karafCVE-2016-8750Fix available6.5 Medium
- apache ooziePath Traversal in Apache OozieCVE-2017-15712Fix available6.5 Medium
- apache jmeterMissing certificate validation in Apache JMeterCVE-2018-1287Fix available9.8 Critical
- apache qpid dispatch, apache software foundation qpid dispatch router +1 moreA Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8...CVE-2017-156996.5 Medium
- apache activemqActiveMQ's OpenWire protocol exposes certain system details as plain textCVE-2017-15709Fix availableEPSS 22.8%3.7 Low
- apache jmeterMissing certificate validation in Apache JMeterCVE-2018-1297Public exploitFix availableEPSS 11.5%9.8 Critical
- apache couchdbThe Windows installer that the Apache CouchDB team provides was vulnerable to local privilege...CVE-2016-8742Public exploit7.8 High
- apache thriftApache Thrift Go Library Command InjectionCVE-2016-5397Fix available8.8 High
- apache juddiApache juddi-client vulnerable to XML External Entity (XXE)CVE-2018-1307Fix available8.1 High
- apache qpid broker-jModerate severity vulnerability that affects org.apache.qpid:apache-qpid-broker-jCVE-2018-1298Fix available5.9 Medium
- apache alluraIn Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files through the...CVE-2018-12997.5 High
- apache cloudstackApache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to...CVE-2016-68139.8 Critical
- apache cloudstackIn Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as...CVE-2013-43174.3 Medium
- apache cordova, apache software foundation cordova android +1 moreAfter the Android platform is added to Cordova the first time, or after a project is created...CVE-2017-31607.4 High
- Show moreLoading…