Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache kafka, oracle communications brm - elastic charging engine, communications cloud native core policy +5 more +7 moreTiming Attack Vulnerability for Apache Kafka Connect and ClientsCVE-2021-38153Fix available5.9 Medium
- apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 moreBypass of the secureValidation propertyCVE-2021-40690Fix available7.5 High
- apache shiro, oracle financial services crime and compliance management studio +1 moreApache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypassCVE-2021-41303Fix availableEPSS 76.1%9.8 Critical
- apache tomcat, debian linux, netapp management services for element software and netapp hci +2 moreApache Tomcat DoS with unexpected TLS packetCVE-2021-41079Fix available7.5 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- apache http server, debian linux, fedoraproject fedora +7 more +9 moreap_escape_quotes buffer overflowCVE-2021-39275Fix availableEPSS 39.4%9.8 Critical
- apache jenaXML External Entity (XXE) vulnerabilityCVE-2021-39239Fix available7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 moremod_proxy_uwsgi out of bound readCVE-2021-36160Fix availableEPSS 63.7%7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd coreCVE-2021-34798Fix availableEPSS 64.5%7.5 High
- apache any23A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.javaCVE-2021-40146Fix available9.8 Critical
- apache any23An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.javaCVE-2021-38555Fix available9.1 Critical
- apache airflowApache Airflow: Variable Import endpoint missed authentication checkCVE-2021-38540Public exploitFix availableEPSS 80.9%9.8 Critical
- apache dubboBypass deserialization checks in Apache DubboCVE-2021-37579Fix available9.8 Critical
- apache dubboUnprotected input value toString cause RCECVE-2021-36161Fix available9.8 Critical
- apache dubboUnsafe deserialization in providers using the Hessian protocolCVE-2021-36163Fix available9.8 Critical
- apache dubboUnprotected yaml deserialization cause RCECVE-2021-36162Fix available8.8 High
- apache zeppelinCross Site Scripting in markdown interpreterCVE-2021-27578Fix available6.1 Medium
- apache zeppelinNotebook permissions bypassCVE-2020-13929Fix available7.5 High
- apache zeppelinbash command injection in spark interpreterCVE-2019-10095Fix available9.8 Critical
- apache ofbiz, ofbiz-framework +1 moreGeneration of Error Message Containing Sensitive Information in Apache OFBizCVE-2021-259586.5 Medium
- apache nifi minifi c\+\+, apache software foundation nifi - minifi c++ +1 moreMiNiFi CPP arbitrary script execution is possible on the agent's host machine through the c2 protocolCVE-2021-331919.8 Critical
- apache portable runtime, portable runtime (apr), oracle http server +2 moreRegression of CVE-2017-12613CVE-2021-35940Fix available7.1 High
- apache ofbizArbitrary file upload vulnerability in OFBizCVE-2021-376089.8 Critical
- apache rollerregex injection leading to DoSCVE-2021-335807.5 High
- apache airflowNo Authentication on Logging ServerCVE-2021-35936Fix available5.3 Medium
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreRequest splitting via HTTP/2 method injection and mod_proxyCVE-2021-33193Fix availableEPSS 46.2%7.5 High
- apache servicecombServiceComb ServiceCenter Directory TraversalCVE-2021-21501Fix available7.5 High
- apache juddiRemote code execution via RMICVE-2021-37578Fix available9.8 Critical
- apache directory studioStartTLS and SASL confidentiality protection bypassCVE-2021-33900Fix available7.5 High
- apache impalaImpala logs contain secretsCVE-2021-281317.5 High
- apache teaclave sgx sdkIn Rust SGX 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level ...CVE-2021-241174.9 Medium
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerabilityCVE-2021-36374Fix available5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerabilityCVE-2021-36373Fix available5.5 Medium
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Fix availableEPSS 12.9%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 moreApache Commons Compress 1.1 to 1.20 denial of service vulnerabilityCVE-2021-35517Fix availableEPSS 10.6%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35516Fix availableEPSS 12.4%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35515Fix availableEPSS 11.6%7.5 High
- apache tomcat, tomee, debian linux +19 more +21 moreIncorrect Transfer-Encoding handling with HTTP/1.0CVE-2021-33037Fix availableEPSS 74.7%5.3 Medium
- apache tomcat, debian linux, oracle communications cloud native core policy +4 more +6 moreAuth weakness in JNDIRealmCVE-2021-30640Fix available6.5 Medium
- apache tomcat, mcafee epolicy orchestrator, oracle big data spatial and graph +2 moreDoS after non-blocking IO errorCVE-2021-30639Fix available7.5 High
- apache sshd, apache software foundation mina sshd, oracle banking payments +7 more +9 moreDoS/OOM leak vulnerability in Apache Mina SSHD ServerCVE-2021-30129Fix available6.5 Medium
- apache jena fusekiDisplay information UI XSSCVE-2021-33192Fix available6.1 Medium
- apache druidApache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intendedCVE-2021-26920Fix available6.5 Medium
- apache traffic server, debian linux +1 moreDynamic stack buffer overflow in cachekey pluginCVE-2021-35474Fix available9.8 Critical
- apache traffic server, debian linux +1 moreReading HTTP/2 frames too many timesCVE-2021-32567Fix available7.5 High
- apache traffic server, debian linux +1 moreSpecific sequence of HTTP/2 frames can cause ATS to crashCVE-2021-32566Fix available7.5 High
- apache traffic server, debian linux +1 moreHTTP Request Smuggling, content length with invalid chartersCVE-2021-32565Fix available7.5 High
- apache traffic server, debian linux +1 moreIncorrect handling of url fragment leads to cache poisoningCVE-2021-27577Fix available7.5 High
- apache nuttxmalloc, realloc and memalign implementations are vulnerable to integer wrap-aroundsCVE-2021-264619.8 Critical
- apache cxf, tomee, oracle business intelligence +2 more +4 moreApache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriterCVE-2021-30468Fix available7.5 High
- Show moreLoading…