Browse CVEs
2,916 results for "Apache"
| CVE ID | Title | Severity | CVSS | Risk | Patch | Published |
|---|---|---|---|---|---|---|
| CVE-2021-28125 | Apache Superset up to and including 1.0.1 allowed for the... | Medium | 6.1 | Medium Risk | 27-Apr-21 | |
| CVE-2021-28359 | The "origin" parameter passed to some of the endpoints li... | Medium | 6.1 | Medium Risk | Patched | 02-May-21 |
| CVE-2021-31164 | Apache Unomi prior to version 1.5.5 allows CRLF log injec... | High | 7.5 | Medium Risk | Patched | 04-May-21 |
| CVE-2021-27737 | Apache Traffic Server 9.0.0 is vulnerable to a remote DOS... | High | 7.5 | Low Risk | 14-May-21 | |
| CVE-2020-28902 | Command Injection in Nagios Fusion 4.1.8 and earlier allo... | Critical | 9.8 | Low Risk | Patched | 24-May-21 |
| CVE-2021-23937 | A DNS proxy and possible amplification attack vulnerabili... | High | 7.5 | Medium Risk | 25-May-21 | |
| CVE-2021-22160 | If Apache Pulsar is configured to authenticate clients us... | Critical | 9.8 | Medium Risk | 26-May-21 | |
| CVE-2018-10867 | Files are accessible without restrictions from the /updat... | Critical | 9.1 | Low Risk | 26-May-21 | |
| CVE-2020-17514 | Apache Fineract prior to 1.5.0 disables HTTPS hostname ve... | High | 7.4 | Low Risk | Patched | 27-May-21 |
| CVE-2021-25641 | Each Apache Dubbo server will set a serialization id to t... | Critical | 9.8 | High Risk | Patched | 01-Jun-21 |