Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache commons configuration, debian linux, netapp snapcenter +2 moreApache Commons Configuration insecure interpolation defaultsCVE-2022-33980Public exploitFix availableEPSS 44.6%9.8 Critical
- apache shiroAuthentication Bypass VulnerabilityCVE-2022-32532Public exploitFix availableEPSS 25.5%9.8 Critical
- apache tikaIncomplete fix and new regex DoS in StandardsExtractingContentHandlerCVE-2022-33879Fix available3.3 Low
- apache systemdsDenial of service in readExternal methodCVE-2022-26477Fix available7.5 High
- apache tomcatXSS in examples web applicationCVE-2022-34305Fix available6.1 Medium
- apache sling api, sling commons log, apache software foundation sling +2 morelog injection in Sling loggingCVE-2022-325495.3 Medium
- apache nifi, nifi registry +1 moreImproper Neutralization of Command Elements in Shell User Group ProviderCVE-2022-33140Public exploitFix available8.8 High
- apache hadoopApache Hadoop Privilege escalation vulnerabilityCVE-2021-33036Fix available8.8 High
- apache flumeApache Flume vulnerable to a JNDI RCE in JMSSourceCVE-2022-25167Fix available9.8 Critical
- apache hadoopHeap buffer overflow in libhdfs native libraryCVE-2021-37404Fix available9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy X-Forwarded-For dropped by hop-by-hop mechanismCVE-2022-31813Public exploitFix available9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreInformation Disclosure in mod_lua with websocketsCVE-2022-30556Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_sed denial of serviceCVE-2022-30522Fix availableEPSS 89.9%7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreDenial of service in mod_lua r:parsebodyCVE-2022-29404Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreRead beyond bounds in ap_strcmp_match()CVE-2022-28615Fix available9.1 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreread beyond bounds via ap_rwrite()CVE-2022-28614Fix available5.3 Medium
- apache http serverread beyond bounds in mod_isapiCVE-2022-28330Fix available5.3 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy_ajp: Possible request smugglingCVE-2022-26377Public exploitFix availableEPSS 21.1%7.5 High
- apache dubbobypass of CVE-2021-25640CVE-2022-24969Fix available6.1 Medium
- apache tikaMissing fix for CVE-2022-30126 in 1.28.2CVE-2022-30973Fix available5.5 Medium
- apache archivaApache Archiva Arbitrary user password reset vulnerabilityCVE-2022-29405Fix available6.5 Medium
- apache software foundation maven, apache maven shared utils, debian linux +2 moreCommandline class shell injection vulnerabilitiesCVE-2022-29599Fix available9.8 Critical
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu (incubating) Regular expression denial of serviceCVE-2022-26650Fix available7.5 High
- apache tika, oracle primavera unifier +1 moreApache Tika Regular Expression Denial of Service in Standards ExtractorCVE-2022-30126Fix available5.5 Medium
- apache tika, oracle primavera unifier +1 moreApache Tika BPGParser Memory Usage DoSCVE-2022-25169Fix available5.5 Medium
- apache tomcat, debian linux, oracle hospitality cruise shipboard property management system +2 moreEncryptInterceptor does not provide complete protection on insecure networksCVE-2022-29885Public exploitFix availableEPSS 73.5%7.5 High
- apache jenaProcessing external DTDsCVE-2022-28890Fix available9.8 Critical
- apache nifiImproper Restriction of XML External Entity References in Multiple ComponentsCVE-2022-29265Fix available7.5 High
- apache doris, apache software foundation doris(incubating) +1 moreApache Doris hardcoded cryptography initializationCVE-2022-23942Fix available7.5 High
- apache couchdbRemote Code Execution Vulnerability in PackagingCVE-2022-24706In KEVPublic exploitFix availableEPSS 92.5%9.8 Critical
- apache apisixapisix/jwt-auth may leak secrets in error responseCVE-2022-29266Fix available7.5 High
- apache supersetSQL injection vulnerability in chart data APICVE-2022-27479Fix available9.8 Critical
- apache strutsForced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.CVE-2021-31805Public exploitFix availableEPSS 85.4%9.8 Critical
- apache hadoopArbitrary file write in FileUtil#unpackEntries on WindowsCVE-2022-26612Fix available9.8 Critical
- apache nifiInsufficiently protected credentialsCVE-2022-26850Fix available4.3 Medium
- apache pinotPinot segment push endpoint has a vulnerability in unprotected environmentsCVE-2022-23974Fix available7.5 High
- apache dolphinschedulerApache DolphinScheduler user registration is vulnerable to ReDoS attacksCVE-2022-25598Fix available7.5 High
- apache apisixApache APISIX: the body_schema check in request-validation plugin can be bypassedCVE-2022-25757Fix available9.8 Critical
- apache traffic server, debian linux +1 moreImproper authentication vulnerability in TLS origin verificationCVE-2021-44759Fix available8.1 High
- apache traffic server, debian linux +1 moreHTTP request line fuzzing attacksCVE-2021-44040Fix available7.5 High
- apache cloudstackApache Cloudstack insecure random number generation affects project email invitationCVE-2022-267797.5 High
- apache http server, debian linux, fedoraproject fedora +1 more +3 moremod_sed: Read/write beyond boundsCVE-2022-23943Public exploitFix availableEPSS 50.4%9.8 Critical
- apache http server, apple mac os x, macos +4 more +6 morecore: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyCVE-2022-22721Fix availableEPSS 41.9%9.1 Critical
- apache http server, apple mac os x, macos +4 more +6 moreHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlierCVE-2022-22720Public exploitFix availableEPSS 28.2%9.8 Critical
- apache http server, apple mac os x, macos +3 more +5 moremod_lua Use of uninitialized value of in r:parsebodyCVE-2022-22719Fix availableEPSS 69.8%7.5 High
- apache spark, oracle financial services crime and compliance management studio +1 moreApache Spark Key Negotiation VulnerabilityCVE-2021-38296Fix available7.5 High
- apache any23An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractorCVE-2022-25312Fix available9.1 Critical
- apache poi, apache software foundation poi-scratchpad, netapp active iq unified manager +2 moreA carefully crafted TNEF file can cause an out of memory exceptionCVE-2022-26336Fix available5.5 Medium
- apache jspwikiApache JSPWiki Cross-site scripting vulnerability on User Preferences screenCVE-2022-24948Fix available6.1 Medium
- apache jspwikiApache JSPWiki CSRF Account TakeoverCVE-2022-24947Fix available8.8 High
- Show moreLoading…