Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache tikaAllocation of Resources Without Limits or Throttling in Apache TikaCVE-2019-10094Fix available7.8 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache TikaCVE-2019-10093Fix available6.5 Medium
- apache solr, debian linux +1 moreXML External Entity (XXE) Injection in Apache SolrCVE-2019-0193In KEVPublic exploitFix availableEPSS 83.5%7.2 High
- apache subversionIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve...CVE-2019-0203Fix available7.5 High
- apache subversionIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve...CVE-2018-11782Fix available6.5 Medium
- fasterxml jackson-databind, apache drill, debian linux +15 more +17 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14439Public exploitFix availableEPSS 10.8%7.5 High
- apache vcl, virtual computing lab +1 moreApache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what...CVE-2018-117727.2 High
- apache vcl, virtual computing lab +1 moreApache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing...CVE-2018-117747.2 High
- apache vcl, virtual computing lab +1 moreApache VCL versions 2.1 through 2.5 do not properly validate form input when processing a...CVE-2018-117739.8 Critical
- softwareag quartz, apache tomee, atlassian jira service management +28 more +30 moreXML external entity injection in Terracotta Quartz SchedulerCVE-2019-13990Public exploitFix availableEPSS 16.6%9.8 Critical
- apache stormDeserialization of Untrusted Data in Apache StormCVE-2018-11779Fix available9.8 Critical
- apache stormExposure of Sensitive Information in Apache Storm LogviewerCVE-2019-0202Fix available7.5 High
- apache rollerA Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math...CVE-2019-02346.1 Medium
- apache kafkaImproper Input Validation in Apache KafkaCVE-2018-17196Fix available8.8 High
- apache geodeArgument Injection in Apache Geode serverCVE-2017-15694Fix available6.5 Medium
- apache tomcatImproper Locking in Apache TomcatCVE-2019-10072Fix availableEPSS 73.0%7.5 High
- apache alluraIn Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown...CVE-2019-100856.1 Medium
- apache fineractSQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary...CVE-2018-118019.8 Critical
- apache fineractSQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary...CVE-2018-118009.8 Critical
- apache hbase, rust-protobuf project rust-protobuf +1 moreUncontrolled memory consumption in protobufCVE-2019-15544Fix available7.5 High
- apache hadoopPrivilege escalation vulnerability in Apache HadoopCVE-2018-8029Fix available8.8 High
- apache camel, oracle enterprise data quality, enterprise manager base platform +2 more +4 moreXML External Entity injection in Apache CamelCVE-2019-0188Fix available7.5 High
- apache rollerServer-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2...CVE-2018-171989.8 Critical
- apache tomcatCross-site scripting in Apache TomcatCVE-2019-0221Public exploitFix availableEPSS 58.3%6.1 Medium
- apache zookeeper, activemq, drill +7 more +9 moreAccess control bypass in Apache ZooKeeperCVE-2019-0201Fix available5.9 Medium
- apache jspwikiCross-site Scriptin in JSPWikiCVE-2019-10078Public exploitFix available6.1 Medium
- apache jspwikiCross-site Scripting in JSPWikiCVE-2019-10077Public exploitFix available6.1 Medium
- apache jspwikiCross-Site Scripting in JSPWikiCVE-2019-10076Public exploitFix available6.1 Medium
- apache karafApache Karaf vulnerable to relative path traversalCVE-2019-0226Fix available4.9 Medium
- apache commons imagingInfinite Loop in Apache SanselanCVE-2018-172027.5 High
- apache commons imagingImproper Input Validation in Apache SanselanCVE-2018-172017.5 High
- apache uima ducc, uimaducc +1 moreCross-site Scripting in Apache UIMACVE-2018-8035Fix available6.1 Medium
- apache axis 1.4, axis, oracle agile engineering data management +35 more +37 moreServer Side Request Forgery in Apache AxisCVE-2019-0227Public exploitFix availableEPSS 91.9%7.5 High
- apache archivaImproper Input Validation in Apache ArchivaCVE-2019-0214Fix available6.5 Medium
- apache archivaCross-site scripting in Apache ArchivaCVE-2019-0213Fix available6.5 Medium
- apache camelPath Traversal in Apache CamelCVE-2019-0194Fix available7.5 High
- apache plutoCross-site Scripting in Apache Pluto Chatroom demoCVE-2019-0186Public exploitFix availableEPSS 20.6%6.1 Medium
- apache qpid, apache software foundation qpid proton, redhat enterprise linux desktop +8 more +10 moreWithdrawn Advisory: Improper Certificate Validation in Apache Qpid ProtonCVE-2019-0223Fix available7.4 High
- apache zeppelinCross-site Scripting in Apache ZeppelinCVE-2018-1328Fix available6.1 Medium
- apache zeppelinImproper Authentication in Apache ZeppelinCVE-2018-1317Fix available8.8 High
- apache zeppelinSession Fixation in Apache ZeppelinCVE-2017-12619Fix available8.1 High
- oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 Medium
- apache pony mail, the apache software foundation apache pony mail (incubating) +1 moreA vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via...CVE-2019-02186.1 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-10241Fix available6.1 Medium
- apache pdfbox, james, fedoraproject fedora +11 more +13 moreVulnerability that affects org.apache.pdfbox:pdfboxCVE-2019-0228Fix available9.8 Critical
- apache tomcatApache Tomcat OS Command Injection vulnerabilityCVE-2019-0232Public exploitFix availableEPSS 99.9%8.1 High
- apache airflowApache Airflow vulnerable to Stored XSSCVE-2019-0216Fix available4.8 Medium
- apache airflowApache Airflow vulnerable to CSRF AttacksCVE-2019-0229Fix available8.8 High
- apache tomcatApache Tomcat Denial of Service vulnerabilityCVE-2019-0199Fix availableEPSS 72.9%7.5 High
- apache http server, fedoraproject fedora +1 moreIn Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location...CVE-2019-0215Fix availableEPSS 10.4%7.5 High
- Show moreLoading…