Apache CVEs
3,093 CVEs and advisories name Apache as an affected vendor, 33 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-41585ATS stops accepting connections on FreeBSD
- CVE-2021-38161Not validating origin TLS certificate
- CVE-2021-37149Request Smuggling - multiple attacks
- CVE-2021-37148Request Smuggling - transfer encoding validation
- CVE-2021-37147Request Smuggling - LF line ending
- CVE-2021-27644DolphinScheduler mysql jdbc connector parameters deserialize remote code execution
- CVE-2021-41973Apache MINA HTTP listener DOS
- CVE-2021-40865Unsafe Pre-Authentication Deserialization In Workers
- CVE-2021-38294Shell Command Injection Vulnerability in Nimbus Thrift Server
- CVE-2021-41971Possible SQL Injection when template processing is enabled
- CVE-2021-32609XSS vulnerability on Explore page
- CVE-2021-42340DoS via memory leak with WebSocket connections
- CVE-2021-38295Privilege escalation vulnerability when using HTML attachments
- CVE-2021-42009Apache Traffic Control Traffic Ops Email Injection Vulnerability
- CVE-2021-41832Content Manipulation with Certificate Validation Attack
- CVE-2021-41831Timestamp Manipulation with Signature Wrapping
- CVE-2021-41830Double Certificate Attack
- CVE-2021-42013Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
- CVE-2021-40439Billion Laughs
- CVE-2021-28129DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid
- CVE-2021-41773Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
- CVE-2021-41524null pointer dereference in h2 fuzzing
- CVE-2021-41616Apache ddlutils 1.0 readobject vulnerability
- CVE-2021-36749Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920)
- CVE-2021-33035Buffer overflow from a crafted DBF file
- CVE-2021-38153Timing Attack Vulnerability for Apache Kafka Connect and Clients
- CVE-2021-40690Bypass of the secureValidation property
- CVE-2021-41303Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass
- CVE-2021-41079Apache Tomcat DoS with unexpected TLS packet
- CVE-2021-40438mod_proxy SSRF