Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache nifiInsertion of Sensitive Information into Log File in Apache NiFiCVE-2020-1942Fix available7.5 High
- htmlunit, apache camel, canonical ubuntu linux +1 more +3 moreCode execution vulnerability in HtmlUnitCVE-2020-5529Fix available8.1 High
- apache ofbizan unauthenticated user could get access to information of some backend screens by invoking...CVE-2019-124265.3 Medium
- apache spamassassinA command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted...CVE-2020-1930Fix available8.1 High
- apache spamassassinA command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted...CVE-2020-1931Fix available8.1 High
- netty, apache spark, canonical ubuntu linux +4 more +6 moreHTTP Request Smuggling in NettyCVE-2019-20445Fix availableEPSS 13.8%9.1 Critical
- apache jackrabbit oakImproper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit OakCVE-2020-1940Fix available7.5 High
- apache supersetInformation disclosure in Apache SupersetCVE-2020-1932Fix available6.5 Medium
- apache nifiCross-site scripting in Apache NiFiCVE-2020-1933Fix available6.1 Medium
- apache nifiApache NiFi Insertion of Sensitive Information into Log FileCVE-2020-1928Fix available5.3 Medium
- apache xml-rpc, canonical ubuntu linux, debian linux +2 more +4 moreInsecure Deserialization in Apache XML-RPCCVE-2019-17570Public exploitFix availableEPSS 49.3%9.8 Critical
- apache cxf, oracle commerce guided search, communications element manager +4 more +6 moreReflected Cross-Site Scripting in Apache CXFCVE-2019-17573Public exploitFix available6.1 Medium
- apache cxf, oracle commerce guided search, communications diameter signaling router +5 more +7 morePrivate key leak in Apache CXFCVE-2019-12423Fix available7.5 High
- apache beamImproper Certificate Validation in Apache BeamCVE-2020-1929Fix available7.5 High
- apache airflowXSS in Apache AirflowCVE-2019-12398Fix available4.8 Medium
- apache kafka, oracle banking corporate lending process management, banking credit facilities process management +10 more +12 moreExposure of Sensitive Information to an Unauthorized Actor in Apache KafkaCVE-2019-12399Fix available7.5 High
- apache cordova, cordova inappbrowser, oracle instantis enterprisetrack +1 more +3 morePrivilege Escalation in cordova-plugin-inappbrowserCVE-2019-0219Fix available9.8 Critical
- apache olingoServer-Side Request Forgery (SSRF) in Apache OlingoCVE-2020-1925Fix available7.5 High
- apache rust sgx sdkBaidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in...CVE-2020-54999.8 Critical
- docker, apache geode, docker.io +2 moreAn issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via...CVE-2014-0048Fix available9.8 Critical
- apache solr, oracle primavera unifier +1 moreImproper Input Validation in Apache SolrCVE-2019-17558In KEVPublic exploitFix availableEPSS 98.6%7.5 High
- sqlite, apache bookkeeper, netapp cloud backup +5 more +7 moreSQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window...CVE-2019-19924Fix availableEPSS 10.7%5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreInsufficiently Protected Credentials in Apache TomcatCVE-2019-12418Fix available7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 High
- apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 Critical
- apache openoffice, libreoffice, debian linux +1 more +3 moreLibreOffice and OpenOffice automatically open embedded contentCVE-2012-56396.5 Medium
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- apache software foundation xerces-c, apache xerces-c\+\+, debian linux +8 more +10 moreThe Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during...CVE-2018-1311Public exploitFix available8.1 High
- apache supersetUsers able to query database metadata in Apache SupersetCVE-2019-12413Fix available5.3 Medium
- apache supersetUsers can view database names in Apache SupersetCVE-2019-12414Fix available5.3 Medium
- apache qpid-cppqpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all...CVE-2014-02127.5 High
- apache spamassassin, debian linux +1 moreIn Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources...CVE-2019-12420Fix available7.5 High
- apache spamassassin, debian linux +1 moreIn Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands...CVE-2018-11805Fix available6.7 Medium
- sqlite, apache guacamole, netapp cloud backup +6 more +8 moreSQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...CVE-2019-19603Fix availableEPSS 11.0%7.5 High
- apache struts, libstruts1.2-java +1 moreUnrestricted Upload of File with Dangerous Type in Apache Struts2CVE-2012-1592Public exploitFix availableEPSS 28.5%8.8 High
- apache olingoImproper input validation in Apache OlingoCVE-2019-17555Fix available7.5 High
- apache olingoDeserialization of Untrusted Data in Apache OlingoCVE-2019-17556Fix available9.8 Critical
- apache olingoImproper Restriction of XML External Entity Reference in Apache OlingoCVE-2019-17554Public exploitFix availableEPSS 12.3%5.5 Medium
- apache openoffice, openoffice.org +1 moreOpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running...CVE-2011-21777.8 High
- apache ofbizThe /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External...CVE-2011-3600EPSS 15.9%7.5 High
- apache nifiApache NiFi process group information disclosureCVE-2019-10083Fix available5.3 Medium
- apache nifiApache NiFi user log out issueCVE-2019-12421Fix available8.8 High
- apache nifiApache NiFi information disclosure by XXECVE-2019-10080Fix available6.5 Medium
- apache shiroImproper input validation in Apache ShiroCVE-2019-12422Public exploitFix available7.5 High
- apache solrUnrestricted upload of file with dangerous type in Apache SolrCVE-2019-12409Public exploitFix availableEPSS 21.6%9.8 Critical
- apache atlasStored XSS in Apache AtlasCVE-2019-10070Public exploitFix available6.1 Medium
- fasterxml jackson-mapper-asl, apache spark, debian linux +2 more +4 moreImproper Restriction of XML External Entity Reference in jackson-mapper-aslCVE-2019-10172Public exploitFix availableEPSS 17.0%5.9 Medium
- apache qpid-cppqpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security...CVE-2009-5004Fix available6.5 Medium
- apache arrowMissing Initialization of Resource in Apache ArrowCVE-2019-12408Fix available7.5 High
- apache arrowMissing Initialization of Resource in Apache ArrowCVE-2019-12410Fix available7.5 High
- Show moreLoading…