Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache spamassassin, debian linux, fedoraproject fedora +2 moreApache SpamAssassin has an OS Command Injection vulnerabilityCVE-2020-1946Fix available9.8 Critical
- apache accumuloApache Accumulo Improper Handling of Insufficient PermissionsCVE-2020-17533Public exploitFix available8.1 High
- apache airflowIncorrect Session Validation in Apache AirflowCVE-2020-17526Fix availableEPSS 23.9%7.7 High
- apache pulsar managerIn the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's...CVE-2020-175206.5 Medium
- apache karaf, bouncycastle bc-java, oracle banking corporate lending process management +17 more +19 moreLogic error in Legion of the Bouncy Castle BC JavaCVE-2020-28052Public exploitFix available8.1 High
- apache dolphinschedulerRemote code execution in DolphinSchedulerCVE-2020-11974Fix available9.8 Critical
- apache tomeeRemote code execution in Apache TomEECVE-2020-13931Fix available9.8 Critical
- x-stream xstream, apache struts, debian linux +1 more +3 moreServer-Side Forgery Request can be activated unmarshalling with XStreamCVE-2020-26258Public exploitFix availableEPSS 81.8%6.3 Medium
- x-stream xstream, apache struts, debian linux +1 more +3 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshallingCVE-2020-26259Public exploitFix availableEPSS 82.4%6.8 Medium
- apache airflowSSRF vulnerability in Apache AirflowCVE-2020-17513Fix available5.3 Medium
- apache airflowApache Airflow logs passwords in plaintextCVE-2020-17511Fix available6.5 Medium
- apache airflowApache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944CVE-2020-17515Fix availableEPSS 16.2%6.1 Medium
- apache struts, oracle business intelligence, communications diameter intelligence hub +5 more +7 moreRemote code execution in Apache StrutsCVE-2020-17530In KEVPublic exploitFix availableEPSS 96.3%9.8 Critical
- apache nuttx, apache software foundation nuttx (incubating) +1 moreApache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP headerCVE-2020-175299.8 Critical
- apache nuttx, apache software foundation nuttx (incubating) +1 moreApache NuttX (incubating) Out of Bound Write from invalid TCP Urgent lengthCVE-2020-175289.1 Critical
- apache tapestryDeserialization flaw in EOL Tapestry 4.CVE-2020-17531Public exploitFix available9.8 Critical
- apache groovy, atlas, netapp snapcenter +18 more +20 moreInformation Disclosure in Apache GroovyCVE-2020-17521Fix available5.5 Medium
- apache apisixIn Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction...CVE-2020-13945Public exploitFix availableEPSS 73.6%6.5 Medium
- apache traffic serverATS negative cache option is vulnerable to a cache poisoning attack. If you have this option...CVE-2020-17509Fix available7.5 High
- apache traffic serverThe ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please...CVE-2020-17508Fix available7.5 High
- apache tomcat, debian linux, netapp element plug-in +9 more +11 moreApache Tomcat: Request header mix-up between HTTP/2 streamsCVE-2020-17527Public exploitFix availableEPSS 24.6%7.5 High
- apache cordovaWe have resolved a security issue in the camera plugin that could have affected certain Cordova ...CVE-2020-11990Public exploit3.3 Low
- eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 moreBuffer not correctly recycled in Gzip Request inflationCVE-2020-27218Fix available4.8 Medium
- apache unomiRemote Code Execution in Apache UnomiCVE-2020-13942Public exploitFix availableEPSS 68.5%9.8 Critical
- apache openofficeA vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents...CVE-2020-13958Public exploit7.8 High
- x-stream xstream, apache activemq, debian linux +12 more +14 moreRemote Code Execution in XStreamCVE-2020-26217Public exploitFix availableEPSS 85.0%8.0 High
- apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 moreApache CXF Reflected XSS in the services listing page via the styleSheetPathCVE-2020-13954Fix availableEPSS 40.9%6.1 Medium
- apache airflow, airflow's experimental api +1 moreAuthentication bypass in Apache AirflowCVE-2020-13927In KEVPublic exploitFix availableEPSS 99.8%9.8 Critical
- apache shiro, debian linux +1 moreAuthentication bypass in Apache ShiroCVE-2020-17510Fix available9.8 Critical
- apache tomcat, oracle agile product lifecycle management +1 moreResponse mix-up with WebSocket concurrent send and closeCVE-2022-25762Fix available8.6 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2020-27216Fix available7.0 High
- apache hadoopAuthentication bypass in Apache HadoopCVE-2018-11764Fix available8.8 High
- apache kylinAuthentication bypass in Apache KylinCVE-2020-13937Public exploitFix availableEPSS 78.3%5.3 Medium
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- apache solrIncorrect Authorization in Apache SolrCVE-2020-13957Public exploitFix availableEPSS 79.3%9.8 Critical
- apache fineractThe implementation of POST with the username and password in the URL parameters exposed the...CVE-2018-202437.5 High
- junit junit4, apache pluto, debian linux +1 more +3 moreInformation disclosure in JUnit4CVE-2020-15250Fix available4.4 Medium
- apache tomcat, debian linux, oracle instantis enterprisetrack +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2020-13943Fix availableEPSS 52.6%4.3 Medium
- apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 moreCross-site scripting in Apache HttpClientCVE-2020-13956Fix available5.3 Medium
- apache calciteMissing Authentication for Critical Function in Apache CalciteCVE-2020-13955Fix available5.9 Medium
- apache nifiInadequate Encryption Strength in Apache NiFiCVE-2020-9491Fix available7.5 High
- apache nifiImproper Restriction of XML External Entity Reference in Apache NiFiCVE-2020-13940Fix available5.5 Medium
- apache nifiMissing Authentication for Critical Function in Apache NiFiCVE-2020-9487Fix available7.5 High
- apache nifiInsertion of Sensitive Information into Log File in Apache NiFi StatelessCVE-2020-9486Fix available7.5 High
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- apache supersetPlaintext password leak in Apache SupersetCVE-2020-13952Fix available8.1 High
- apache openmeetingsDenial of service in Apache OpenMeetingsCVE-2020-13951Public exploitFix availableEPSS 68.6%7.5 High
- apache hadoopImproper Authentication in Apache HadoopCVE-2018-11765Fix available7.5 High
- apache tapestryImproper file downloads in Apache TapestryCVE-2020-13953Fix available5.3 Medium
- apache airflowApache Airflow Cross-site ScriptingCVE-2020-13944Fix availableEPSS 25.1%6.1 Medium
- Show moreLoading…