Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache airflowApache Airflow: RCE in example DAGsCVE-2022-24288Fix availableEPSS 78.4%8.8 High
- apache airflowApache Airflow: Reflected XSS via Origin Query Argument in URLCVE-2021-45229Fix available6.1 Medium
- apache cayenneDeserialization of untrusted data in the Hessian Component of Apache Cayenne 4.1 with older Java versionsCVE-2022-24289Fix available8.8 High
- apache apisixapisix/batch-requests plugin allows overwriting the X-REAL-IP headerCVE-2022-24112In KEVPublic exploitFix availableEPSS 96.1%9.8 Critical
- apache cassandraRemote code execution for scripted UDFsCVE-2021-44521Public exploitFix availableEPSS 58.9%9.1 Critical
- apache jamesPath traversal in Apache James 3.6.1CVE-2022-22931Public exploitFix available4.3 Medium
- apache traffic controlServer-Side Request Forgery in Traffic Ops endpoint POST /user/login/oauthCVE-2022-23206Fix available7.5 High
- apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 moreApache ActiveMQ Artemis DoSCVE-2022-23913Fix available7.5 High
- apache gobblinInsecure TrustManager used in LDAP connectionsCVE-2021-36152Fix available9.8 Critical
- apache gobblinLocal Credentials Disclosure VulnerabilityCVE-2021-36151Fix available5.5 Medium
- apache supersetAPI sensitive information leakCVE-2021-44451Fix available6.5 Medium
- apache pulsarPulsar Admin API allows access to data from other tenants using getMessageById APICVE-2021-41571Fix available6.5 Medium
- apache tomcat, debian linux, oracle agile engineering data management +4 more +6 moreLocal privilege escalation with FileStoreCVE-2022-23181Fix available7.0 High
- apache karafPath traversal flawsCVE-2022-22932Public exploitFix available5.3 Medium
- apache karafInsecure Java Deserialization in Apache KarafCVE-2021-41766Fix available8.1 High
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu missing authentication allows gateway registrationCVE-2022-23945Fix available7.5 High
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu 2.4.1 Improper access controlCVE-2022-23944Fix availableEPSS 79.0%9.1 Critical
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu Password leakageCVE-2022-23223Fix available7.5 High
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu 2.4.1 Groovy Code Injection & SpEL InjectionCVE-2021-45029Fix available9.8 Critical
- apache software foundation xerces, apache xerces-j, netapp active iq unified manager +27 more +29 moreInfinite loop within Apache XercesJ xml parserCVE-2022-23437Fix availableEPSS 11.6%6.5 Medium
- apache shardingsphere elasticjob-uiAccess-Token in ElasticJob UI causes password disclosureCVE-2022-22733Public exploitEPSS 41.8%6.5 Medium
- apache airflowApache Airflow: Creating DagRuns didn't respect Dag-level permissions in the WebserverCVE-2021-45230Fix available6.5 Medium
- apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 moreA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.CVE-2022-23307Fix availableEPSS 54.4%8.8 High
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 moreSQL injection in JDBC Appender in Apache Log4j V1CVE-2022-23305Public exploitFix availableEPSS 66.5%9.8 Critical
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 moreDeserialization of untrusted data in JMSSink in Apache Log4j 1.xCVE-2022-23302Fix availableEPSS 63.8%8.8 High
- apache knoxDOM based XSS Vulnerability in Apache KnoxCVE-2021-42357Fix available6.1 Medium
- apache guacamoleImproper validation of SAML responsesCVE-2021-439998.8 High
- apache guacamolePrivate tunnel identifier may be included in the non-private details of active connectionsCVE-2021-41767Fix available6.5 Medium
- apache dubboDubbo Hessian cause RCE when parse errorCVE-2021-43297Public exploitFix availableEPSS 17.4%9.8 Critical
- apache avroPossible DOS vulnerabilities in C# Avro SDKCVE-2021-43045Fix available7.5 High
- apache kylinHardcoded credentialsCVE-2021-45458Fix available7.5 High
- apache kylinOverly broad CORS configurationCVE-2021-45457Fix available7.5 High
- apache kylinCommand injectionCVE-2021-45456Fix availableEPSS 88.9%9.8 Critical
- apache kylinMysql JDBC Connector Deserialize RCECVE-2021-36774Fix available6.5 Medium
- apache kylinApache Kylin unsafe class loadingCVE-2021-31522Fix available9.8 Critical
- apache kylinImproper Access Control to Streaming Coordinator & SSRFCVE-2021-27738Fix available7.5 High
- apache pluto, apache software foundation portals +1 moreXSS vulnerability in the MVCBean JSP portlet maven archetypeCVE-2021-36739Fix available6.1 Medium
- apache pluto, apache software foundation portals +1 moreXSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portletCVE-2021-36738Fix available6.1 Medium
- apache pluto, apache software foundation portals +1 moreXSS in V3 Demo PortletCVE-2021-36737Fix available6.1 Medium
- apache jamesSieve file storage vulnerable to path traversal attacksCVE-2021-40525Fix available9.1 Critical
- apache jamesApache James IMAP parsing Denial Of ServiceCVE-2021-40111Fix available6.5 Medium
- apache jamesApache James IMAP vulnerable to a ReDoSCVE-2021-40110Fix available7.5 High
- apache jamesApache James vulnerable to STARTTLS command injection (IMAP and POP3)CVE-2021-38542Fix available5.9 Medium
- apache geodeApache Geode project log file redaction of sensitive information vulnerabilityCVE-2021-34797Fix available7.5 High
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- apache apisix dashboardsecurity vulnerability on unauthorized access.CVE-2021-45232Public exploitFix availableEPSS 86.3%9.8 Critical
- apache solrApache Solr information disclosure vulnerability through DataImportHandlerCVE-2021-44548Fix available9.8 Critical
- apache http server, apple mac os x, macos +8 more +10 morePossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlierCVE-2021-44224Fix availableEPSS 82.3%8.2 High
- apache software foundation parquet, apache parquet java +1 moreApache Parquet-MR potential DoS in case of malicious Parquet fileCVE-2021-41561Fix available7.5 High
- apache http server, apple mac os x, macos +10 more +12 morePossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlierCVE-2021-44790Public exploitFix availableEPSS 96.8%9.8 Critical
- Show moreLoading…