Apache CVEs
3,093 CVEs and advisories name Apache as an affected vendor, 33 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-39275ap_escape_quotes buffer overflow
- CVE-2021-39239XML External Entity (XXE) vulnerability
- CVE-2021-36160mod_proxy_uwsgi out of bound read
- CVE-2021-34798NULL pointer dereference in httpd core
- CVE-2021-40146A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.java
- CVE-2021-38555An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java
- CVE-2021-38540Apache Airflow: Variable Import endpoint missed authentication check
- CVE-2021-37579Bypass deserialization checks in Apache Dubbo
- CVE-2021-36161Unprotected input value toString cause RCE
- CVE-2021-36163Unsafe deserialization in providers using the Hessian protocol
- CVE-2021-36162Unprotected yaml deserialization cause RCE
- CVE-2021-27578Cross Site Scripting in markdown interpreter
- CVE-2020-13929Notebook permissions bypass
- CVE-2019-10095bash command injection in spark interpreter
- CVE-2021-25958Generation of Error Message Containing Sensitive Information in Apache OFBiz
- CVE-2021-33191MiNiFi CPP arbitrary script execution is possible on the agent's host machine through the c2 protocol
- CVE-2021-35940Regression of CVE-2017-12613
- CVE-2021-37608Arbitrary file upload vulnerability in OFBiz
- CVE-2021-33580regex injection leading to DoS
- CVE-2021-35936No Authentication on Logging Server
- CVE-2021-33193Request splitting via HTTP/2 method injection and mod_proxy
- CVE-2021-21501ServiceComb ServiceCenter Directory Traversal
- CVE-2021-37578Remote code execution via RMI
- CVE-2021-33900StartTLS and SASL confidentiality protection bypass
- CVE-2021-28131Impala logs contain secrets
- CVE-2021-36374Apache Ant ZIP, and ZIP based, archive denial of service vulerability
- CVE-2021-36373Apache Ant TAR archive denial of service vulnerability
- CVE-2021-36090Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
- CVE-2021-35517Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
- CVE-2021-35516Apache Commons Compress 1.6 to 1.20 denial of service vulnerability