Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache supersetApache Superset OS Command InjectionCVE-2020-13948Fix available8.8 High
- apache atlasCross-site scripting in Apache AtlasCVE-2020-13928Fix available6.1 Medium
- apache syncopeShell command injection in Apache SyncopeCVE-2020-11977Fix available7.2 High
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproper Preservation of Permissions in Apache StrutsCVE-2019-0233Fix availableEPSS 66.1%7.5 High
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproperly Controlled Modification of Dynamically-Determined Object Attributes in Apache StrutsCVE-2019-0230Public exploitFix availableEPSS 96.9%9.8 Critical
- apache cocoonWhen using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML,...CVE-2020-11991EPSS 72.6%7.5 High
- apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 moreRemote code execution in Apache ActiveMQCVE-2020-11998Public exploitFix availableEPSS 48.9%9.8 Critical
- apache activemq, debian linux, oracle communications diameter signaling router +1 more +3 moreImproper Authentication in Apache ActiveMQCVE-2020-13920Fix available5.9 Medium
- apache netbeansTo be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans...CVE-2020-11986Fix available9.8 Critical
- apache cassandra, netapp oncommand insight +1 moreMan-in-the-middle attack in Apache CassandraCVE-2020-13946Fix available5.9 Medium
- apache shiro, debian linux +1 moreAuthentication bypass in Apache ShiroCVE-2020-13933Public exploitFix availableEPSS 44.4%7.5 High
- apache solrImproper Input Validation in Apache SolrCVE-2020-13941Public exploitFix available8.8 High
- apache wicket, fortress +1 moreExposure of Sensitive Information to an Unauthorized Actor in Apache WicketCVE-2020-11976Fix available7.5 High
- apache http serverIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using...CVE-2020-11985Fix available5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...CVE-2020-11993Fix availableEPSS 56.6%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCECVE-2020-11984Public exploitFix availableEPSS 90.0%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- apache skywalkingSQL Injection in Apache SkyWalkingCVE-2020-13921Fix availableEPSS 33.5%9.8 Critical
- apache artemis, apache software foundation activemq artemis +1 moreCross-site Scripting (XSS) in Apache ActiveMQ ArtemisCVE-2020-13932Fix available6.1 Medium
- apache airflowStored XSS in Apache AirflowCVE-2020-9485Fix available6.1 Medium
- apache airflowMultiple stored XSS in RBAC Admin screens in Apache AirflowCVE-2020-11983Fix available5.4 Medium
- apache airflowInsecure default config of Celery worker in Apache AirflowCVE-2020-11982Fix available9.8 Critical
- apache airflowCommand injection via Celery broker in Apache AirflowCVE-2020-11981Public exploitFix availableEPSS 36.8%9.8 Critical
- apache airflowRemote code execution (RCE) in Apache AirflowCVE-2020-11978In KEVPublic exploitFix availableEPSS 99.2%8.8 High
- apache ofbizXML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in...CVE-2020-9496Public exploitEPSS 98.9%6.1 Medium
- apache ofbizIDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz...CVE-2020-139235.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +15 more +17 moreInfinite Loop in Apache TomcatCVE-2020-13935Public exploitFix availableEPSS 86.6%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2020-13934Fix availableEPSS 64.1%7.5 High
- apache dubboDeserialization of Untrusted Data in Apache DubboCVE-2020-1948Public exploitFix availableEPSS 16.4%9.8 Critical
- apache kylinSQL Injection in KylinCVE-2020-13926Fix available9.8 Critical
- apache kylinCommand Injection in KylinCVE-2020-13925Public exploitFix availableEPSS 20.0%9.8 Critical
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreServer side template injection in Apache CamelCVE-2020-11994Fix available7.5 High
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via...CVE-2020-9498Fix available6.7 Medium
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via...CVE-2020-9497Fix available4.4 Medium
- apache skywalking**Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through...CVE-2020-9483Public exploitEPSS 34.1%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreUncontrolled Resource Consumption in Apache TomcatCVE-2020-11996Public exploitFix availableEPSS 26.7%7.5 High
- apache artemis, red hat activemq artemis, netapp oncommand workflow automation +2 moreActiveMQ Artemis has Insufficiently Protected CredentialsCVE-2020-10727Fix available5.5 Medium
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesCVE-2020-8022Fix available7.7 High
- apache traffic server, debian linux +1 moreApache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to...CVE-2020-9494Fix available7.5 High
- apache spark, oracle business intelligence +1 moreImproper Authentication in Apache SparkCVE-2020-9480Public exploitFix availableEPSS 30.2%9.8 Critical
- apache batik, oracle api gateway, business intelligence +15 more +17 moreServer-side request forgery (SSRF) in Apache BatikCVE-2019-17566Fix availableEPSS 10.9%7.5 High
- apache shiroImproper Authentication in Apache ShiroCVE-2020-11989Public exploitFix availableEPSS 24.4%9.8 Critical
- apache archivaInjection in Apache ArchivaCVE-2020-9495Public exploitFix available5.3 Medium
- apache tomeeMissing Authentication for Critical Function in Apache TomEECVE-2020-11969Fix available9.8 Critical
- apache karafServer-Side Request Forgery in KarafCVE-2020-11980Fix available6.3 Medium
- apache unomiImproper Input Validation in Apache UnomiCVE-2020-11975Public exploitFix availableEPSS 30.6%9.8 Critical
- apache igniteFile system access via H2 in Apache IgniteCVE-2020-1963Fix available9.1 Critical
- apache kylinCommand Injection in KylinCVE-2020-1956In KEVPublic exploitFix availableEPSS 98.0%8.8 High
- jodd, apache hive +1 moreDeserialization of Untrusted Data in JoddCVE-2018-21234Fix available9.8 Critical
- apache couchdbCouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the...CVE-2020-1955Fix available9.8 Critical
- Show moreLoading…