Apache Trended Vulnerabilities

Popular vulnerabilities are those that have been exploited or trending within the past 365 days.

Partial Fix for Content-Type Based Configuration Ignores Use of Legacy Handlers, Leading to Source Code Disclosure
CVE-2024-40725
ApacheApache Http Server🥇📈👾🟡📰5.3MEDIUM
Incorrect Authorization Vulnerability Affects Apache OFBiz Through 18.12.14
CVE-2024-38856
ApacheApache Ofbiz🥇📈💰👾🟡EPSS 94%🦅📰9.8CRITICAL
Flawed File Upload Logic in Apache Struts Exposes Vulnerability
CVE-2024-53677
ApacheApache Struts🥇📈💰👾🟡📰
Race Condition Vulnerability in Apache Tomcat Leading to Remote Code Execution
CVE-2024-50379
ApacheApache Tomcat🥇📈👾🟡📰9.8CRITICAL
Race Condition Vulnerability in Apache Tomcat Affects Multiple Versions
CVE-2024-56337
ApacheApache Tomcat🥇📈📰9.8CRITICAL
Remote Code Execution Risk in Apache MINA ObjectSerializationDecoder
CVE-2024-52046
ApacheApache Mina🥇📈10CRITICAL
SQL Injection Vulnerability in Apache Traffic Control
CVE-2024-45387
ApacheApache Traffic Control📈💰👾🟡📰9.9CRITICAL
Server-Side Request Forgery (SSRF) and Improper Control of Generation of Code (Code Injection) Vulnerability in Apache OFBiz
CVE-2024-45507
ApacheApache Ofbiz📈EPSS 57%9.8CRITICAL
Apache Tomcat Vulnerability: Generation of Error Message Containing Sensitive Information
CVE-2024-21733
ApacheApache Tomcat📈👾🟡📰5.3MEDIUM
RCE Vulnerability in Apache HugeGraph-Server
CVE-2024-27348
ApacheApache Hugegraph-server📈👾🟡EPSS 96%🦅📰9.8CRITICAL