Tag: security@apache.org

0 Attack Reports | 212 Vulnerabilities

Vulnerabilities

CVE-2025-30065

10.0
    Apache
  • Parquet
Published: April 1, 2025

CVE-2025-24859

10.0
    Apache
  • Roller
Published: April 14, 2025

CVE-2024-45387

9.9
    Apache Traffic Control
Published: December 23, 2024

CVE-2024-43202

9.8
    Apache DolphinScheduler
Published: August 20, 2024

CVE-2024-22399

9.8
    Apache
  • Seata
Published: September 16, 2024

CVE-2024-45507

9.8
    Apache
  • Ofbiz
Published: September 4, 2024

CVE-2024-45216

9.8
    Apache Solr
Published: October 16, 2024

CVE-2024-47208

9.8
    Apache OFBiz
Published: November 18, 2024

CVE-2024-52316

9.8
    Apache Tomcat
Published: November 18, 2024

CVE-2024-52338

9.8
    Apache Arrow R package
Published: November 28, 2024

CVE-2024-50379

9.8
    Apache Tomcat
Published: December 17, 2024

CVE-2024-56337

9.8
    Apache Tomcat
Published: December 20, 2024

CVE-2024-43441

9.8
    Apache HugeGraph-Server
Published: December 24, 2024

CVE-2024-54676

9.8
    Apache
  • Openmeetings
Published: January 8, 2025

CVE-2024-56180

9.8
    Apache EventMesh
Published: February 14, 2025

CVE-2024-55532

9.8
    Apache Ranger
Published: March 3, 2025

CVE-2025-24813

9.8
    Apache
  • Tomcat
    Debian
Published: March 10, 2025

CVE-2024-23590

9.1
    Apache Kylin
Published: November 4, 2024

CVE-2024-51504

9.1
    ZooKeeper
Published: November 7, 2024

CVE-2024-50306

9.1
    Apache Traffic Server
Published: November 14, 2024

CVE-2024-45479

9.1
    Apache Ranger
Published: January 21, 2025

CVE-2024-27181

8.8
    Apache Linkis
Published: August 2, 2024

CVE-2024-42062

8.8
    Apache CloudStack
Published: August 7, 2024

CVE-2024-29831

8.8
    Apache DolphinScheduler
Published: August 12, 2024

CVE-2024-45034

8.8
    Apache Airflow
Published: September 7, 2024

CVE-2024-42323

8.8
    Apache HertzBeat (incubating)
Published: September 21, 2024

CVE-2023-50780

8.8
    Apache
  • Activemq Artemis
Published: October 14, 2024

CVE-2024-45693

8.8
    Apache
  • Cloudstack
Published: October 16, 2024

CVE-2024-41151

8.8
    Apache HertzBeat
Published: November 18, 2024

CVE-2024-45505

8.8
    Apache HertzBeat (incubating)
Published: November 18, 2024

CVE-2024-51941

8.8
    Ambari
Published: January 21, 2025

CVE-2025-23196

8.8
    Ambari
Published: January 21, 2025

CVE-2025-23015

8.8
    Apache Cassandra
Published: February 4, 2025

CVE-2024-32838

8.8
    Apache
  • Fineract
Published: February 12, 2025

CVE-2025-30473

8.8
    Apache
  • Airflow Common Sql Provider
Published: April 7, 2025

CVE-2024-38286

8.6
    Apache Tomcat
Published: November 7, 2024

CVE-2024-37358

8.6
    Apache James
Published: February 6, 2025

CVE-2024-32114

8.5
    Apache ActiveMQ
Published: May 2, 2024

CVE-2024-45219

8.5
    Apache CloudStack
Published: October 16, 2024

CVE-2024-50386

8.5
    Apache CloudStack
Published: November 12, 2024

CVE-2022-31764

8.5
    Apache ShardingSphere ElasticJob-UI
Published: February 6, 2025

CVE-2024-53679

8.4
    Apache
  • Vcl
Published: March 25, 2025

CVE-2022-41137

8.3
    Apache Hive Metastore (HMS)
Published: December 5, 2024

CVE-2024-45720

8.2
    Subversion
Published: October 9, 2024

CVE-2024-45217

8.1
    Apache Solr
Published: October 16, 2024

CVE-2024-45106

8.1
    Apache Ozone
Published: December 3, 2024

CVE-2024-45033

8.1
    Apache Airflow Fab Provider
Published: January 8, 2025

CVE-2024-45772

8.0
    Apache
  • Lucene
Published: September 30, 2024

CVE-2024-43383

8.0
    Apache Lucene.Net Replicator
Published: October 31, 2024

CVE-2024-32007

7.5
    Apache
  • Cxf
Published: July 19, 2024

CVE-2023-49198

7.5
    Apache
  • Seatunnel
Published: August 21, 2024

CVE-2024-39928

7.5
    Apache Linkis
Published: September 25, 2024

CVE-2024-47197

7.5
    Apache
  • Maven Archetype
Published: September 26, 2024

CVE-2024-28168

7.5
    Apache XML Graphics FOP
Published: October 9, 2024

CVE-2024-45195

7.5
    Apache
  • Ofbiz
Published: September 4, 2024

CVE-2024-22281

7.5
    Apache Helix Front (UI)
Published: August 20, 2024

CVE-2024-38479

7.5
    Apache Traffic Server
Published: November 14, 2024

CVE-2024-50305

7.5
    Apache Traffic Server
Published: November 14, 2024

CVE-2024-45784

7.5
    Apache Airflow
Published: November 15, 2024

CVE-2024-45791

7.5
    Apache HertzBeat
Published: November 18, 2024

CVE-2024-51569

7.5
    Apache NimBLE
Published: November 26, 2024

CVE-2025-23195

7.5
    Ambari
    Oozie
Published: January 21, 2025

CVE-2025-24783

7.5
    Apache Cocoon
Published: January 27, 2025

CVE-2025-27553

7.5
    Apache
  • Commons Vfs
Published: March 23, 2025

CVE-2024-47561

7.3
    Apache Avro
Published: October 3, 2024

CVE-2025-30067

7.2
    Apache
  • Kylin
Published: March 27, 2025

CVE-2024-45462

7.1
    Apache
  • Cloudstack
Published: October 16, 2024

CVE-2024-46910

7.1
    Apache Atlas
Published: February 13, 2025

CVE-2024-34693

6.8
    Apache Superset
Published: June 20, 2024

CVE-2024-45537

6.5
    Apache
  • Druid
Published: September 17, 2024

CVE-2024-52317

6.5
    Apache Tomcat
Published: November 18, 2024

CVE-2024-31141

6.5
    Apache Kafka Clients
Published: November 19, 2024

CVE-2024-53299

6.5
    Apache Wicket
Published: January 23, 2025

CVE-2024-45626

6.5
    Apache
  • James Server
Published: February 6, 2025

CVE-2025-25069

6.5
    Apache Kvrocks
Published: February 7, 2025

CVE-2024-24778

6.5
    Apache StreamPipes
Published: March 3, 2025

CVE-2024-48944

6.5
    Apache
  • Kylin
Published: March 27, 2025

CVE-2025-29868

6.5
    Apache
  • Answer
Published: April 1, 2025

CVE-2025-30177

6.5
    Apache
  • Camel
Published: April 1, 2025

CVE-2024-56736

6.5
    Apache
  • Hertzbeat
Published: April 16, 2025

CVE-2024-45461

6.3
    Apache
  • Cloudstack
Published: October 16, 2024

CVE-2024-47248

6.3
    Apache NimBLE
Published: November 26, 2024

CVE-2024-38311

6.3
    Apache Traffic Server
Published: March 6, 2025

CVE-2024-56195

6.3
    Apache Traffic Server
Published: March 6, 2025

CVE-2024-56196

6.3
    Apache Traffic Server
Published: March 6, 2025

CVE-2024-41937

6.1
    Apache
  • Airflow
Published: August 21, 2024

CVE-2024-52318

6.1
    Apache Tomcat
Published: November 18, 2024

CVE-2025-25247

6.1
    Apache Felix Webconsole
Published: February 10, 2025

CVE-2025-30676

6.1
    Apache
  • Ofbiz
Published: April 1, 2025

CVE-2024-23945

5.9
    Apache Hive
    Apache Spark
Published: December 23, 2024

CVE-2024-45627

5.9
    Apache Linkis
Published: January 14, 2025

CVE-2025-23184

5.9
    Apache
  • Cxf
Published: January 21, 2025

CVE-2025-27888

5.8
    Apache
  • Druid
Published: March 20, 2025

CVE-2025-27636

5.6
    Apache Camel
Published: March 9, 2025

CVE-2023-49582

5.5
    Apache
  • Portable Runtime
Published: August 26, 2024

CVE-2024-29869

5.5
    Apache Hive
Published: January 28, 2025

CVE-2024-52012

5.4
    Apache Solr
Published: January 27, 2025

CVE-2025-24814

5.4
    Apache Solr
Published: January 27, 2025

CVE-2025-24860

5.4
    Apache Cassandra
Published: February 4, 2025

CVE-2024-48019

5.4
    Apache Doris
Published: February 4, 2025

CVE-2024-45384

5.3
    Apache
  • Druid
Published: September 17, 2024

CVE-2024-40761

5.3
    Apache Answer
Published: September 25, 2024

CVE-2024-54677

5.3
    Apache Tomcat
Published: December 17, 2024

CVE-2024-56128

5.3
    Apache Kafka
Published: December 18, 2024

CVE-2024-27137

5.3
    Apache Cassandra
Published: February 4, 2025

CVE-2024-53678

5.1
    Apache
  • Vcl
Published: March 25, 2025

CVE-2024-47249

5.0
    Apache NimBLE
Published: November 26, 2024

CVE-2024-47250

5.0
    Apache NimBLE
Published: November 26, 2024

CVE-2024-50378

4.9
    Apache Airflow
Published: November 8, 2024

CVE-2024-45478

4.8
    Apache Ranger
Published: January 21, 2025

CVE-2024-46911

4.7
    Apache Roller
Published: October 14, 2024

CVE-2024-37389

4.6
    Apache NiFi
Published: July 8, 2024

CVE-2024-45477

4.6
    Apache
  • Nifi
Published: October 29, 2024

CVE-2024-28148

4.3
    Apache Superset
Published: May 7, 2024

CVE-2024-39887

4.3
    Apache Superset
Published: July 16, 2024

CVE-2025-22828

4.3
    Apache CloudStack
Published: January 13, 2025

CVE-2024-56202

4.3
    Apache Traffic Server
Published: March 6, 2025

CVE-2024-54016

4.3
    Apache
  • Seata
Published: March 20, 2025

CVE-2025-29891

4.2
    Apache
  • Camel
Published: March 12, 2025

CVE-2025-26865

3.5
    Apache OFBiz
Published: March 10, 2025

CVE-2024-46901

3.1
    Apache Subversion
Published: December 9, 2024

CVE-2024-45719

2.6
    Apache Answer
Published: November 22, 2024

CVE-2025-27427

2.3
    Apache
  • Activemq Artemis
Published: April 1, 2025

CVE-2024-32638

None
    Apache APISIX
    Apache APISIX
Published: May 2, 2024

CVE-2023-35701

None
    Apache Hive
Published: May 3, 2024

CVE-2024-26579

None
    Apache InLong
    Apache InLong
Published: May 8, 2024

CVE-2024-32113

None
    Apache OFBiz
Published: May 8, 2024

CVE-2024-34365

None
    Apache Karaf Cave
Published: May 14, 2024

CVE-2024-32077

None
    Apache Airflow
Published: May 14, 2024

CVE-2024-36104

None
    Apache OFBiz
Published: June 4, 2024

CVE-2024-36471

None
    Apache Allura
Published: June 10, 2024

CVE-2024-36263

None
    Apache Submarine Server Core
Published: June 12, 2024

CVE-2024-36264

None
    Apache Submarine Commons Utils
    Apache Submarine Commons Utils
    Apache Submarine Commons Utils
Published: June 12, 2024

CVE-2024-36265

None
    Apache Submarine Server Core
Published: June 12, 2024

CVE-2024-25142

None
    Apache Airflow
Published: June 14, 2024

CVE-2024-38379

None
    Apache Allura
Published: June 22, 2024

CVE-2024-27136

None
    Apache JSPWiki
Published: June 24, 2024

CVE-2024-29868

None
    Apache StreamPipes
Published: June 24, 2024

CVE-2024-34750

None
    Apache Tomcat
Published: July 3, 2024

CVE-2024-39884

None
    Apache HTTP Server
Published: July 4, 2024

CVE-2024-38346

None
    CloudStack
Published: July 5, 2024

CVE-2024-39864

None
    CloudStack
Published: July 5, 2024

CVE-2024-36522

None
    Apache Xalan-J
Published: July 12, 2024

CVE-2023-41916

None
    Apache Linkis
Published: July 15, 2024

CVE-2023-46801

None
    Apache Linkis
Published: July 15, 2024

CVE-2023-49566

None
    Apache Linkis
Published: July 15, 2024

CVE-2023-52290

None
    streampark-console
Published: July 16, 2024

CVE-2024-39863

None
    Apache Airflow
Published: July 17, 2024

CVE-2024-39877

None
    Apache Airflow
Published: July 17, 2024

CVE-2023-52291

None
    streampark
Published: July 17, 2024

CVE-2024-29737

None
    streampark
Published: July 17, 2024

CVE-2024-30471

None
    Apache StreamPipes
Published: July 17, 2024

CVE-2024-31979

None
    Apache StreamPipes
Published: July 17, 2024

CVE-2024-31411

None
    Apache StreamPipes
Published: July 17, 2024

CVE-2024-29120

None
    Streampark
Published: July 17, 2024

CVE-2024-40725

None
    Apache HTTP Server
Published: July 18, 2024

CVE-2024-40898

None
    Apache HTTP Server
Published: July 18, 2024

CVE-2024-29178

None
    UNKNOWN
Published: July 18, 2024

CVE-2024-29736

None
    Apache CXF
Published: July 19, 2024

CVE-2024-41172

None
    Apache CXF
Published: July 19, 2024

CVE-2024-41107

None
    CloudStack
Published: July 19, 2024

CVE-2024-23321

None
    RocketMQ
Published: July 22, 2024

CVE-2024-34457

None
    UNKNOWN
Published: July 22, 2024

CVE-2024-38503

None
    Apache Syncope
Published: July 22, 2024

CVE-2024-29070

None
    UNKNOWN
Published: July 23, 2024

CVE-2024-41178

None
    Apache Arrow Rust Object Store (`object_store` crate)
Published: July 23, 2024

CVE-2023-48362

None
    Apache Drill
Published: July 24, 2024

CVE-2024-39676

None
    Apache Pinot
Published: July 24, 2024

CVE-2024-25090

None
    Apache Roller
Published: July 26, 2024

CVE-2023-38522

None
    Apache Traffic Server
Published: July 26, 2024

CVE-2024-35161

None
    Apache Traffic Server
Published: July 26, 2024

CVE-2024-35296

None
    Apache Traffic Server
Published: July 26, 2024

CVE-2023-48396

None
    Apache SeaTunnel
Published: July 30, 2024

CVE-2024-27182

None
    Apache Linkis
Published: August 2, 2024

CVE-2024-36268

None
    Apache InLong
Published: August 2, 2024

CVE-2024-42447

None
    Apache Airflow Providers FAB
Published: August 5, 2024

CVE-2024-38856

None
    Apache OFBiz
Published: August 5, 2024

CVE-2024-36448

None
    Apache IoTDB Workbench
Published: August 5, 2024

CVE-2024-42222

None
    Apache CloudStack
Published: August 7, 2024

CVE-2024-30188

None
    Apache DolphinScheduler
Published: August 12, 2024

CVE-2024-41888

None
    Apache Answer
Published: August 12, 2024

CVE-2024-41890

None
    Apache Answer
Published: August 12, 2024

CVE-2024-41909

None
    Apache MINA SSHD
Published: August 12, 2024

CVE-2024-45498

None
    Apache Airflow
Published: September 7, 2024

CVE-2024-46544

None
    Apache Tomcat Connectors
Published: September 23, 2024

CVE-2024-23454

None
    Apache Hadoop
Published: September 25, 2024

CVE-2024-47554

None
    Apache Commons IO
Published: October 3, 2024

CVE-2024-45031

None
    Syncope
Published: October 24, 2024

CVE-2024-48962

None
    Apache OFBiz
Published: November 18, 2024

CVE-2024-52067

None
    Apache NiFi
Published: November 21, 2024

CVE-2024-53947

None
    Apache Superset
Published: December 9, 2024

CVE-2024-53948

None
    Apache Superset
Published: December 9, 2024

CVE-2024-53949

None
    Apache Superset
Published: December 9, 2024

CVE-2024-53677

None
    Apache Struts
Published: December 11, 2024

CVE-2024-55633

None
    Apache Superset
Published: December 12, 2024

CVE-2024-52046

None
    Apache MINA
Published: December 25, 2024

CVE-2024-56512

None
    Apache NiFi
Published: December 28, 2024

CVE-2024-23953

None
    Apache Hive
Published: January 28, 2025

CVE-2024-52577

None
    Apache Ignite
Published: February 14, 2025

CVE-2025-27867

None
    Apache
  • Felix Http Webconsole Plugin
Published: March 12, 2025

CVE-2025-27017

None
    Apache
  • Ni-Fi
Published: March 12, 2025

CVE-2025-27018

None
    Apache
  • Airflow Mysql Provider
Published: March 19, 2025

CVE-2024-47552

None
    Apache
  • Seata
Published: March 20, 2025

CVE-2025-26796

None
    Apache
  • Oozie
Published: March 22, 2025

CVE-2025-30474

None
    Apache
  • Commons Vfs
Published: March 23, 2025

CVE-2024-56325

None
    Apache
  • Controller
Published: April 1, 2025

CVE-2024-53868

None
    Apache
  • Traffic Server
Published: April 3, 2025

CVE-2025-30677

None
    pulsar
    pulsar
    pulsar
Published: April 9, 2025

CVE-2025-31672

None
    poi
    poi_ooxml
Published: April 9, 2025

CVE-2025-27391

None
    activemq_artemis
    activemq_artemis
Published: April 9, 2025

CVE-2025-29953

None
    Apache
  • Activemq Nms Openwire Client
Published: April 18, 2025

CVE-2025-26413

None
    Apache
  • Kvrocks
Published: April 22, 2025
Click here to see more Vulnerabilities