Apache Popular Vulnerabilities

Popular vulnerabilities are those that have been exploited or trending within the past 365 days.

Partial Fix for Content-Type Based Configuration Ignores Use of Legacy Handlers, Leading to Source Code Disclosure

CVE-2024-40725
ApacheApache Http Server🔥😄5.3MEDIUM

Incorrect Authorization Vulnerability Affects Apache OFBiz Through 18.12.14

CVE-2024-38856
ApacheApache Ofbiz🔥😄👾🟣9.8CRITICAL

RCE Vulnerability in Apache HugeGraph-Server

CVE-2024-27348
ApacheApache Hugegraph-server😄👾🟣9.8CRITICAL

Apache Tomcat Vulnerability: Generation of Error Message Containing Sensitive Information

CVE-2024-21733
ApacheApache Tomcat😄👾5.3MEDIUM

Remote Code Execution Vulnerability in Apache Struts

CVE-2023-51467
ApacheApache Ofbiz😄👾9.8CRITICAL

Server-Side Request Forgery (SSRF) and Improper Control of Generation of Code (Code Injection) Vulnerability in Apache OFBiz

CVE-2024-45507
ApacheApache Ofbiz😄9.8CRITICAL

Unchecked Error Condition Vulnerability Affects Apache Tomcat

CVE-2024-52316
ApacheApache Tomcat👾

Incorrect Object Recycling Vulnerability Affects Apache Tomcat Versions

CVE-2024-52317
Apache👾

Apache Avro Java SDK Vulnerability

CVE-2024-47561
ApacheApache Avro Java Sdk👾

Apache OFBiz vulnerable to 'Forced Browsing' (Direct Request) attack

CVE-2024-45195
ApacheApache Ofbiz👾7.5HIGH

SAML Authentication Vulnerability in CloudStack Environments

CVE-2024-41107
ApacheApache Cloudstack👾8.1HIGH

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption Vulnerability Affects Apache Tomcat

CVE-2024-34750
ApacheApache Tomcat👾

Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability Affects Apache StreamPipes from 0.69.0 to 0.93.0

CVE-2024-29868
ApacheApache Streampipes👾

Improper Input Validation Vulnerability in Apache Superset Allows for File Reading and Insertion

CVE-2024-34693
ApacheApache Superset👾6.8MEDIUM

Apache OFBiz vulnerable to Path Traversal attack

CVE-2024-36104
ApacheApache Ofbiz👾

Apache OFBiz Fixes Path Traversal Vulnerability

CVE-2024-32113
ApacheApache Ofbiz👾9.8CRITICAL

Malicious Input Validation Flaw Affects Apache HTTP Server

CVE-2023-38709
ApacheApache Http Server👾

nghttp2 Temporarily Buffers Incoming Headers to Prevent Memory Exhaustion

CVE-2024-27316
ApacheApache Http Server👾7.5HIGH

Apache James Vulnerability: Deserialization of Untrusted Data Could Lead to Privilege Escalation

CVE-2023-51518
ApacheApache James Server👾

Deserialization of Untrusted Data Vulnerability

CVE-2024-23114
ApacheApache Camel👾

Allocation of Resources Without Limits or Throttling Vulnerability

CVE-2024-26308
ApacheApache Commons Compress👾5.5MEDIUM

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere Vulnerability in Apache Solr

CVE-2023-50386
ApacheApache Solr👾8.8HIGH

Struts File Upload Vulnerability Could Lead to Remote Code Execution

CVE-2023-50164
ApacheApache Struts👾9.8CRITICAL

Pre-auth RCE in Apache Ofbiz Prior to 18.12.10 Due to XML-RPC No Longer Maintained

CVE-2023-49070
ApacheApache Ofbiz👾9.8CRITICAL