Filter
AND

Software

apache http server
33
apache struts
27
apache ofbiz
20
apache openoffice
19
apache dubbo
13
apache hadoop
12
apache traffic server
12
apache airflow
11
apache camel
9
apache inlong
9
apache log4j
9
apache shiro
9
apache cloudstack
8
apache solr
8
apache tomcat
8
apache activemq
7
apache kylin
7
apache couchdb
6
apache cxf
6
apache geode
6
apache fineract
5
apache linkis
5
apache openmeetings
5
apache tapestry
5
apache hertzbeat
4
apache ignite
4
apache iotdb
4
apache nifi
4
apache nuttx
4
apache portable runtime
4
apache pulsar
4
apache spamassassin
4
apache spark
4
apache storm
4
apache submarine
4
apache superset
4
apache tomee
4
apache ambari
3
apache any23
3
apache apache-airflow-providers-apache-hive
3
apache cassandra
3
apache dolphinscheduler
3
apache flume
3
apache geronimo
3
apache jmeter
3
apache karaf
3
apache netbeans
3
apache ozone
3
apache ranger
3
apache shenyu
3
apache struts 2
3
apache xerces-c++
3
apache apisix
2
apache batik
2
apache chainsaw
2
apache cocoon
2
apache commons configuration
2
apache derby
2
apache groovy
2
apache heron
2
apache hive
2
apache impala
2
apache james
2
apache jetspeed
2
apache log4j2
2
apache mesos
2
apache nutch
2
apache openwhisk
2
apache qpid broker-j
2
apache rocketmq
2
apache roller
2
apache shardingsphere
2
apache sling
2
apache streampark
2
apache syncope
2
apache tika
2
apache traffic control
2
apache unomi
2
apache xml-rpc
2
apache accumulo
1
apache activemq apollo
1
apache activemq legacy openwire module
1
apache airflow hive provider
1
apache airflow's experimental api
1
apache apache
1
apache apache calcite avatica
1
apache apache-airflow-providers-apache-pig
1
apache apache-airflow-providers-apache-pinot
1
apache apache-airflow-providers-apache-sqoop
1
apache apache-airflow-providers-fab
1
apache apache-airflow-providers-google
1
apache apache-airflow-providers-mysql
1
apache apisix dashboard
1
apache apr
1
apache archiva
1
apache aurora
1
apache avro
1
apache axis
1
apache axis2
1
apache bookkeeper
1
apache brooklyn
1
apache brpc
1
apache calcite
1
apache commons bcel
1
apache commons collections
1
apache commons fileupload
1
apache commons httpclient
1
apache commons jelly
1
apache commons text
1
apache cordova inappbrowser for android
1
apache cordova inappbrowser ios
1
apache cordova ios
1
apache cxf fediz
1
apache ddlutils
1
apache directory ldap api
1
apache directory studio
1
apache drill
1
apache druid
1
apache eventmesh
1
apache flex blazeds
1
apache flink
1
apache gobblin
1
apache helix
1
apache hugegraph
1
apache hugegraph-server
1
apache identity backend
1
apache iotdb web workbench
1
apache ivy
1
apache jackrabbit
1
apache james server
1
apache jclouds
1
apache jena
1
apache jena sdb
1
apache jspwiki
1
apache juddi
1
apache kerby
1
apache ldap studio
1
apache log4net
1
apache maven
1
apache maven shared utils
1
apache mod_perl
1
apache myfaces trinidad
1
apache nifi minifi c\+\+
1
apache olingo
1
apache opennlp
1
apache openoffice.org
1
apache pdfbox
1
apache pinot
1
apache pony mail
1
apache pyarrow
1
apache rust sgx sdk
1
apache seata
1
apache skywalking
1
apache sling commons json
1
apache soap
1
apache sshd
1
apache struts 1
1
apache struts2-showcase
1
apache synapse
1
apache thrift
1
apache tomcat jk connector
1
apache velocity engine
1
apache virtual computing lab
1
apache wicket
1
apache ws-xmlrpc
1
apache wss4j
1
apache xmlbeans
1
apache zeppelin
1
apache zookeeper
1

Apache APISIXApache APISIX Authentication Bypass Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2022-24112

Apache RocketMQApache RocketMQ Command Execution Vulnerability

critical
9.8
Exploited
Zeroday
First published (updated )
CVE-2023-33246

Apache CouchDBApache CouchDB Insecure Default Initialization of Resource Vulnerability

critical
10
Exploited
First published (updated )
CVE-2022-24706

Apache ShiroApache Shiro Code Execution Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2016-4437

Apache ActiveMQApache ActiveMQ Improper Input Validation Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2016-3088

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache RangerApache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost

critical
9.1
First published (updated )
CVE-2024-45479

redhat/javaOracle Java SE and JRockit Unspecified Vulnerability

critical
10
Exploited
First published (updated )
CVE-2016-3427

Pivotal Software Spring Data CommonsVMware Tanzu Spring Data Commons Property Binder Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2018-1273

Apache CloudStackApache CloudStack: x-forwarded-for HTTP header parsed by default

critical
9.8
EPSS
0.04%
First published (updated )
CVE-2024-29006

Apache StrutsApache Struts 1 Improper Input Validation Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2017-9791

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache ActiveMQApache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

critical
10
Exploited
First published (updated )
CVE-2023-46604

Apache SolrApache Solr DataImportHandler Code Injection Vulnerability

critical
9
Exploited
First published (updated )
CVE-2019-0193

Apache StrutsApache Struts Remote Code Execution Vulnerability

critical
9.3
Exploited
First published (updated )
CVE-2018-11776

Apache TomcatApache Tomcat Remote Code Execution Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2016-8735

Apache StrutsApache Struts Remote Code Execution Vulnerability

critical
10
Exploited
First published (updated )
CVE-2017-5638

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

maven/org.apache.pulsar:pulsar-functions-workerApache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution

critical
9.9
EPSS
0.04%
First published (updated )
CVE-2024-27135

composer/phpunit/phpunitPHPUnit Command Injection Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2017-9841

maven/org.apache.pulsar:pulsar-functions-workerApache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification

critical
10
EPSS
0.04%
First published (updated )
CVE-2024-27317

Apache OpenOfficeInteger Overflow

critical
9.3
First published (updated )
CVE-2008-3282

Apache HertzBeatHertzBeat AviatorScript Inject RCE

critical
9.8
First published (updated )
CVE-2023-51388

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Apache HertzBeatHertzBeat SnakeYAML Deser RCE

critical
9.8
First published (updated )
CVE-2023-51389

Apache HertzBeatHertzbeat JMX JNDI RCE

critical
9.8
First published (updated )
CVE-2023-51653

Apache Xerces-C++Apache Xerces C++: Use-after-free on external DTD scan

critical
9.8
EPSS
0.04%
First published (updated )
CVE-2024-23807

maven/org.apache.openmeetings:openmeetings-parentApache OpenMeetings: Deserialisation of untrusted data in cluster mode

critical
9.8
First published (updated )
CVE-2024-54676

Apache HTTP ServerApache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

critical
9.8
First published (updated )
CVE-2024-38476

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

IBM Cognos AnalyticsApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

critical
9.8
First published (updated )
CVE-2023-39410

Debian Debian Linuxap_escape_quotes buffer overflow

critical
9.8
First published (updated )
CVE-2021-39275

redhat/httpdmod_proxy SSRF

critical
9
Exploited
First published (updated )
CVE-2021-40438

oracle instantis enterprisetrackApache HTTP Server mod_session response handling heap overflow

critical
9.8
First published (updated )
CVE-2021-26691

Apache OFBizApache OFBiz Path Traversal Vulnerability

critical
9.8
Exploited
First published (updated )
CVE-2024-32113

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203