Apache CVEs
3,093 CVEs and advisories name Apache as an affected vendor, 33 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-25167Apache Flume vulnerable to a JNDI RCE in JMSSource
- CVE-2021-37404Heap buffer overflow in libhdfs native library
- CVE-2022-31813mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
- CVE-2022-30556Information Disclosure in mod_lua with websockets
- CVE-2022-30522mod_sed denial of service
- CVE-2022-29404Denial of service in mod_lua r:parsebody
- CVE-2022-28615Read beyond bounds in ap_strcmp_match()
- CVE-2022-28614read beyond bounds via ap_rwrite()
- CVE-2022-28330read beyond bounds in mod_isapi
- CVE-2022-26377mod_proxy_ajp: Possible request smuggling
- CVE-2022-24969bypass of CVE-2021-25640
- CVE-2022-30973Missing fix for CVE-2022-30126 in 1.28.2
- CVE-2022-29405Apache Archiva Arbitrary user password reset vulnerability
- CVE-2022-29599Commandline class shell injection vulnerabilities
- CVE-2022-26650Apache ShenYu (incubating) Regular expression denial of service
- CVE-2022-30126Apache Tika Regular Expression Denial of Service in Standards Extractor
- CVE-2022-25169Apache Tika BPGParser Memory Usage DoS
- CVE-2022-25762Response mix-up with WebSocket concurrent send and close
- CVE-2022-29885EncryptInterceptor does not provide complete protection on insecure networks
- CVE-2022-28890Processing external DTDs
- CVE-2022-29265Improper Restriction of XML External Entity References in Multiple Components
- CVE-2022-23942Apache Doris hardcoded cryptography initialization
- CVE-2022-24706Remote Code Execution Vulnerability in Packaging
- CVE-2022-29266apisix/jwt-auth may leak secrets in error response
- CVE-2022-27479SQL injection vulnerability in chart data API
- CVE-2022-24070Apache Subversion mod_dav_svn is vulnerable to memory corruption
- CVE-2021-28544Apache Subversion SVN authz protected copyfrom paths regression
- CVE-2021-31805Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.
- CVE-2022-26612Arbitrary file write in FileUtil#unpackEntries on Windows
- CVE-2022-26850Insufficiently protected credentials