Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache tomcat native, debian linux +1 moreApache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check...CVE-2018-8020Fix available7.4 High
- apache tomcat native, debian linux +1 moreWhen using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not...CVE-2018-8019Fix available7.4 High
- red hat httpd, redhat enterprise linux, apache http server +3 more +5 moreA regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing...CVE-2017-121716.5 Medium
- apache kafka, oracle database, primavera p6 enterprise project portfolio management +2 more +4 moreImproper Control of Generation of Code in Apache KafkaCVE-2018-1288Fix available5.4 Medium
- apache kafkaImproper Authentication in Apache KafkaCVE-2017-12610Fix available6.8 Medium
- apache tomcat, canonical ubuntu linux, debian linux +1 more +3 moreThe host name verification missing in Apache TomcatCVE-2018-8034Fix availableEPSS 21.0%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoderCVE-2018-1336Fix availableEPSS 20.4%7.5 High
- apache tomeeApache TomEE console vulnerable to Cross-site ScriptingCVE-2018-8031Fix available6.1 Medium
- apache openwhisk, apache software foundation docker skeleton runtime for apache openwhisk +1 moreIn Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag...CVE-2018-117579.8 Critical
- apache openwhisk, apache software foundation php runtime for apache openwhisk +1 moreIn PHP Runtime for Apache OpenWhisk, a Docker action inheriting one of the Docker tags openwhisk...CVE-2018-117569.8 Critical
- apache igniteCode execution via deserialization in org.apache.ignite:ignite-coreCVE-2018-8018Fix available9.8 Critical
- apache ambariApache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in...CVE-2018-80428.1 High
- apache http server, netapp cloud backup +1 moremod_md, DoS via Coredumps on specially crafted requestsCVE-2018-8011Fix availableEPSS 55.3%7.5 High
- apache spark, mozilla firefox +1 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URLCVE-2018-8024Fix available5.4 Medium
- apache sparkExposure of Sensitive Information to an Unauthorized Actor in Apache SparkCVE-2018-1334Fix available4.7 Medium
- apache couchdbApache CouchDB administrative users can configure the database server via HTTP(S). Due to...CVE-2018-8007Fix availableEPSS 12.2%7.2 High
- apache stormCode execution in org.apache.storm:storm-coreCVE-2018-1331Fix available8.8 High
- apache directory ldap api, apache software foundation directory +1 moreCredential leak in org.apache.directory.api:apache-ldap-apiCVE-2018-1337Fix available9.8 Critical
- apache solr, netapp snapcenter, storage automation store +2 moreXML external entity expansion in org.apache.solr:solr-coreCVE-2018-8026Fix available5.5 Medium
- apache cxf fedizHigh severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf…CVE-2018-8038Public exploitFix availableEPSS 10.2%7.5 High
- apache pdfboxLoop with Unreachable Exit Condition in Apache PDFBoxCVE-2018-8036Fix available6.5 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreApache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*CVE-2018-8039Public exploitFix available8.1 High
- apache cassandraMissing Authentication for Critical Function in Apache CassandraCVE-2018-8016Fix available9.8 Critical
- apache plutoExposure of Sensitive Information in Apache PlutoCVE-2018-1306Public exploitFix availableEPSS 42.3%7.5 High
- apache hbaseRace condition in org.apache.hbase:hbase-thriftCVE-2018-8025Fix available8.1 High
- apache qpid broker-jDenial of service vulnerability exists when .NET and .NET Core improperly process XML documentsCVE-2018-8030Fix available7.5 High
- apache http server, canonical ubuntu linux, netapp cloud backup +2 more +4 moreDoS for HTTP/2 connections by crafted requestsCVE-2018-1333Fix availableEPSS 17.0%7.5 High
- apache geodeApache Geode vulnerable to Incorrect AuthorizationCVE-2017-15695Fix available8.8 High
- apache mxnetThe clustered setup of Apache MXNet allows users to specify which IP address and port the...CVE-2018-12816.5 Medium
- apache stormZipSlip in org.apache.storm:storm-coreCVE-2018-8008Fix available5.5 Medium
- apache stormModerate severity vulnerability that affects org.apache.storm:storm-coreCVE-2018-1332Fix available6.5 Medium
- apache nifiApache NiFi JMS Deserialization issueCVE-2018-1310Fix available7.5 High
- apache nifiImproper Restriction of XML External Entity Reference in Apache NiFiCVE-2018-1309Fix available9.8 Critical
- apache batik, canonical ubuntu linux, debian linux +18 more +20 moreDeserialization of Untrusted Data in Apache BatikCVE-2018-8013Fix availableEPSS 18.6%9.8 Critical
- apache zookeeper, debian linux, oracle goldengate stream analytics +2 moreMissing Authorization in Apache ZooKeeperCVE-2018-8012Fix available7.5 High
- apache solrThere is a XML external entity expansion (XXE) vulnerability in Apache Solr config filesCVE-2018-8010Fix available5.5 Medium
- apache orcApache ORC vulnerable to Uncontrolled RecursionCVE-2018-8015Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all originsCVE-2018-8014Fix availableEPSS 20.9%9.8 Critical
- apache derby, oracle weblogic server +1 moreImproper Access Control in Apache DerbyCVE-2018-1313Public exploitFix available5.3 Medium
- apache ambariApache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing...CVE-2018-80035.3 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 moreAn information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice...CVE-2018-10583Public exploitFix availableEPSS 79.5%7.5 High
- apache uima-as, uimaducc, uimafit +2 more +4 moreImproper Restriction of XML External Entity Reference in Apache uimajCVE-2017-15691Fix available6.5 Medium
- apache tikaorg.apache.tika:tika-parsers has an Infinite Loop vulnerabilityCVE-2018-1339Fix available5.5 Medium
- apache tikaModerate severity vulnerability that affects org.apache.tika:tika-coreCVE-2018-1338Fix available5.5 Medium
- apache tikaCommand injection in org.apache.tika:tika-coreCVE-2018-1335Public exploitFix availableEPSS 93.6%8.1 High
- apache fineractWithin the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0...CVE-2018-12928.1 High
- apache fineractApache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating exposes different...CVE-2018-12918.1 High
- apache fineractIn Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a...CVE-2018-12909.8 Critical
- apache fineractIn Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, the...CVE-2018-12898.8 High
- oracle jrockit, oracle corporation java, apache xerces-j +13 more +15 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2799Fix availableEPSS 15.0%5.3 Medium
- Show moreLoading…