apache

13 published stories · 2 KEV

• CVE-2016-3081 — Apache Struts Command Injection Vulnerability (85/100)
• CVE-2026-92414 — CVE-2026-92414 — : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. (36/100)
• CVE-2026-82617 — apache opennlp: The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGE… (39/100)
• CVE-2026-34486 — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (84/100)
• CVE-2026-68979 — CVE-2026-68979 — Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce au… (23/100)
• CVE-2026-68980 — CVE-2026-68980 — Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Con… (9/100)
• CVE-2026-66756 — CVE-2026-66756 — Improper Protection of Alternate Path vulnerability in Apache Tika. (21/100)
• CVE-2026-55971 — CVE-2026-55971 — Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. (36/100)
• CVE-2026-48144 — CVE-2026-48144 — Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. (35/100)
• CVE-2026-58662 — CVE-2026-58662 — Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bin… (34/100)
• CVE-2026-58023 — CVE-2026-58023 — Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. (27/100)
• CVE-2026-62392 — apache kylin: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in A… (33/100)
• CVE-2026-47898 — CVE-2026-47898 — Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net (Lucene.Net.Analysis… (15/100)