Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...CVE-2019-0220Fix availableEPSS 17.9%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- apache http server, canonical ubuntu linux, debian linux +2 moreA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...CVE-2019-0196Fix availableEPSS 19.3%5.3 Medium
- apache hbaseImproper Authorization in org.apache.hbase:hbaseCVE-2019-0212Fix available7.5 High
- apache activemq, debian linux, netapp e-series santricity web services +5 more +7 moreImproper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-clientCVE-2019-0222Public exploitFix availableEPSS 12.0%7.5 High
- apache jspwikiImproper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-warCVE-2019-0225Public exploitFix available7.5 High
- apache jspwikiModerate severity vulnerability that affects org.apache.jspwiki:jspwiki-mainCVE-2019-0224Fix available6.1 Medium
- apache mesos, redhat fuse +1 moreDocker image code execution with Apache MesosCVE-2019-0204Fix available7.8 High
- apache karafModerate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karafCVE-2019-0191Fix available6.5 Medium
- apache heronWhen accessing the heron-ui webpage, people can modify the file paths outside of the current...CVE-2018-117897.5 High
- apache hadoopImproper Privilege Management in org.apache.hadoop:hadoop-mainCVE-2018-11767Fix available7.4 High
- apache solrServer-Side Request Forgery (SSRF) in org.apache.solr:solr-coreCVE-2017-3164Public exploitFix availableEPSS 19.4%7.5 High
- apache solr, netapp storage automation store +1 moreCritical severity vulnerability that affects org.apache.solr:solr-coreCVE-2019-0192Public exploitFix availableEPSS 78.2%9.8 Critical
- apache traffic serversslheaders plugin extracts information from the client certificate and sets headers in the...CVE-2018-11783Fix available7.5 High
- apache qpid broker-jImproper Input Validation in Apache Qpid Broker-JCVE-2019-0200Fix available7.5 High
- apache jmeterUnauthenticated Remote Code Execution in Apache JMeterCVE-2019-0187Fix available9.8 Critical
- apache mesosStack Overflow in Apache MesosCVE-2018-11793Fix available7.5 High
- apache airflowApache Airflow vulnerable to Stored XSSCVE-2018-20244Fix available5.5 Medium
- apache jspwikiCross-site Scripting in jspwiki-warCVE-2018-20242Fix available6.1 Medium
- docker, linuxfoundation runc, apache mesos +15 more +17 morerunc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...CVE-2019-5736Public exploitFix availableEPSS 98.5%8.6 High
- apache guacamoleMissing Encryption of Sensitive Data in Apache GuacamoleCVE-2018-1340Fix available7.5 High
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in HadoopCVE-2018-1296Fix available7.5 High
- apache sparkPyspark User Impersonation VulnerabilityCVE-2018-11760Fix available5.5 Medium
- apache http server, oracle enterprise manager ops center, hospitality guest access +2 more +4 moreA bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a...CVE-2019-0190Fix availableEPSS 59.9%7.5 High
- apache http server, canonical ubuntu linux, debian linux +9 more +11 moreIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...CVE-2018-17189Fix availableEPSS 19.4%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +3 more +5 moreIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...CVE-2018-17199Fix availableEPSS 20.0%7.5 High
- apache airflowImproper Certificate Validation in Apache AirflowCVE-2018-20245Fix available7.5 High
- apache airflowApache Airflow vulnerable to XSSCVE-2017-17836Fix available9.8 Critical
- apache airflowCross-Site Request Forgery (CSRF) in Apache AirflowCVE-2017-17835Fix available8.8 High
- apache airflowImproper Input Validation in Apache Airflow resulting in Remote Code ExecutionCVE-2017-15720Fix available8.8 High
- apache subversion, canonical ubuntu linux +1 moreSubversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash...CVE-2018-11803Fix availableEPSS 58.5%7.5 High
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...CVE-2019-6111Public exploitFix availableEPSS 58.2%5.9 Medium
- apache mesosServer-side request forgery vulnerability in Jenkins Mesos PluginCVE-2018-1000421Fix available6.5 Medium
- apache mesosImproper authorization vulnerability in Jenkins Mesos PluginCVE-2018-1000420Fix available6.5 Medium
- apache thriftApache Thrift Node.js static web server sandbox escapeCVE-2018-11798Fix available6.5 Medium
- apache thrift, debian linux, f5 traffix signaling delivery controller +2 more +4 moreImproper Input Validation in Apache ThriftCVE-2018-1320Fix available7.5 High
- apache karafXML External Entity Reference in Apache KarafCVE-2018-11788Public exploitFix available9.8 Critical
- apache couchdbPrior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of...CVE-2018-171887.2 High
- apache netbeansApache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is...CVE-2018-17191Fix available9.8 Critical
- apache openoffice, canonical ubuntu linux +1 moreWhen loading a document with Apache Open Office 4.1.5 and earlier with smaller end line...CVE-2018-11790Fix available7.8 High
- apache tikaApache Tika Denial of Service due to Infinite Loop in Tika's SQLite3ParserCVE-2018-17197Fix available6.5 Medium
- apache oozieModerate severity vulnerability that affects org.apache.oozie:oozie-coreCVE-2018-11799Fix available6.5 Medium
- apache nifiCleartext Transmission of Sensitive Information in Apache nifiCVE-2018-17195Fix available7.5 High
- apache nifiApache NiFi Improper Input Validation vulnerabilityCVE-2018-17194Fix available7.5 High
- apache nifiCross site scripting in org.apache.nifi:nifiCVE-2018-17193Fix available6.1 Medium
- apache nifiImproper Restriction of Rendered UI Layers or Frames in Apache nififCVE-2018-17192Fix available6.5 Medium
- apache ofbizIn Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine...CVE-2018-8033Public exploitEPSS 25.7%7.5 High
- apache hadoopArbitrary Command Execution in HadoopCVE-2018-11766Fix available8.8 High
- Show moreLoading…