İçeriğe atla
Noroxi

apache kayıtları

apache üreticisine ait 3.437 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
45 · %1,3
Silahlaştırılmış
107 · %3,1
Pre-auth RCE
333
Düzeltme kaydı olan
%87,2
Yayından KEV’e ortanca
503 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

3.437 kayıt
  • CVE-2021-44228
    100Hemen

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100

    apache · log4j10 Ara 2021

  • CVE-2017-5638
    99Hemen

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · struts10 Mar 2017

  • CVE-2013-2251
    99Hemen

    Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · archiva19 Tem 2013

  • CVE-2021-41773
    99Hemen

    Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · http server5 Eki 2021

  • CVE-2021-42013
    99Hemen

    Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · http server7 Eki 2021

  • CVE-2025-24813
    99Hemen

    Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · tomcat10 Mar 2025

  • CVE-2024-32113
    99Hemen

    Apache OFBiz: Path traversal leading to RCE

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · ofbiz8 May 2024

  • CVE-2023-46604
    99Hemen

    Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · activemq27 Eki 2023

  • CVE-2020-13927
    99Hemen

    The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security ri

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · airflow10 Kas 2020

  • CVE-2024-38856
    99Hemen

    Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · ofbiz5 Ağu 2024

  • CVE-2020-1938
    99Hemen

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · geode24 Şub 2020

  • CVE-2024-27348
    99Hemen

    Apache HugeGraph-Server: Command execution in gremlin

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · hugegraph22 Nis 2024

  • CVE-2017-9791
    99Hemen

    The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message t

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · struts10 Tem 2017

  • CVE-2016-3088
    99Hemen

    The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTT

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · activemq1 Haz 2016

  • CVE-2023-27524
    98Hemen

    Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    apache · superset24 Nis 2023

  • CVE-2018-1273
    98Hemen

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    broadcom · spring data commons11 Nis 2018

  • CVE-2023-33246
    98Hemen

    Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    apache · rocketmq24 May 2023

  • CVE-2022-24112
    98Hemen

    apisix/batch-requests plugin allows overwriting the X-REAL-IP header

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    apache · apisix11 Şub 2022

  • CVE-2020-17530
    98Hemen

    Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    apache · struts10 Ara 2020

  • CVE-2016-4437
    97Hemen

    Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbit

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    apache · aurora7 Haz 2016

  • CVE-2022-24706
    97Hemen

    Remote Code Execution Vulnerability in Packaging

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    apache · couchdb26 Nis 2022

  • CVE-2016-3427
    97Hemen

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to aff

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92

    oracle · jdk21 Nis 2016

  • CVE-2021-40438
    96Hemen

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %100

    resf · rocky linux16 Eyl 2021

  • CVE-2021-45046
    96Hemen

    Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %100

    apache · log4j14 Ara 2021

  • CVE-2024-38475
    96Hemen

    Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %100

    apache · http server1 Tem 2024