apache Vulnerability Advisory Catalog

Total 2,993 security vulnerabilities recorded for apache software and firmware.

← Back to All Vendors
Component: struts

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: throu...

๐Ÿ“… 2023-06-14
CVSS 4.3 Dossier →
Component: struts

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: throu...

๐Ÿ“… 2023-06-14
CVSS 4.3 Dossier →
Component: traffic_server

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache...

๐Ÿ“… 2023-06-14
CVSS 7.5 Dossier →
Component: traffic_server

Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.ย  The configuration optionย proxy.config.http.push_method_e...

๐Ÿ“… 2023-06-14
CVSS 7.5 Dossier →
Component: traffic_server

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache...

๐Ÿ“… 2023-06-14
CVSS 7.5 Dossier →
Component: nifi

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user t...

๐Ÿ“… 2023-06-12
CVSS 8.8 Dossier →
Component: nifi

The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allo...

๐Ÿ“… 2023-06-12
CVSS 6.5 Dossier →
Component: guacamole

Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to exe...

๐Ÿ“… 2023-06-07
CVSS 6.8 Dossier →
Component: guacamole

Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potential...

๐Ÿ“… 2023-06-07
CVSS 6.5 Dossier →
Component: apache-airflow-providers-cncf-kubernetes

Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow c...

๐Ÿ“… 2023-05-30
CVSS 7.2 Dossier →
Component: cassandra

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issu...

๐Ÿ“… 2023-05-30
CVSS 7.8 Dossier →
Component: jspwiki

A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute...

๐Ÿ“… 2023-05-25
CVSS 6.1 Dossier →
CVE-2023-33246 CRITICAL
Component: rocketmq

For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.ย  Several components of RocketMQ, includ...

๐Ÿ“… 2023-05-24
CVSS 9.8 Dossier →
Component: inlong

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1....

๐Ÿ“… 2023-05-22
CVSS 7.5 Dossier →
Component: inlong

Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 thr...

๐Ÿ“… 2023-05-22
CVSS 6.5 Dossier →
CVE-2023-31098 CRITICAL
Component: inlong

Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0.ย  Whe...

๐Ÿ“… 2023-05-22
CVSS 9.8 Dossier →
CVE-2023-31066 CRITICAL
Component: inlong

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1...

๐Ÿ“… 2023-05-22
CVSS 9.1 Dossier →
CVE-2023-31065 CRITICAL
Component: inlong

Insufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0.ย ...

๐Ÿ“… 2023-05-22
CVSS 9.1 Dossier →
Component: inlong

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1...

๐Ÿ“… 2023-05-22
CVSS 7.5 Dossier →
CVE-2023-31062 CRITICAL
Component: inlong

Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0.ย ...

๐Ÿ“… 2023-05-22
CVSS 9.8 Dossier →
Component: inlong

Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from...

๐Ÿ“… 2023-05-22
CVSS 7.5 Dossier →
Component: inlong

Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from...

๐Ÿ“… 2023-05-22
CVSS 7.5 Dossier →
Component: inlong

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1....

๐Ÿ“… 2023-05-22
CVSS 7.5 Dossier →
Component: inlong

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0...

๐Ÿ“… 2023-05-22
CVSS 7.5 Dossier →
Page 46 of 125 (2,993 Total Records)