Vendor
Apache
91 known vulnerabilities.
Products
Apache HTTP Server 5
Apache Tomcat 5
OFBiz 4
Apache Tika 4
Apache OFBiz 4
VCL 3
Olingo 3
Apache Solr 2
Kafka 2
CXF 2
Apache SpamAssassin 2
Storm 2
Apache JSPWiki 2
Apache Archiva 2
Apache Fineract 2
Apache Camel 2
Apache Thrift 2
Apache Tapestry 2
HertzBeat 2
Apache CXF 2
Solr 2
Airflow 1
Dubbo 1
Apache Karaf 1
IoTDB 1
Shiro 1
Apache jclouds 1
Kylin 1
Apache Santuario - XML Security for Java 1
Apache Kylin 1
WSS4J 1
Apache ActiveMQ 1
activemq-artemis 1
Karaf 1
Apache Commons Configuration 1
Apache Mesos 1
Atlas 1
Apache Druid 1
Beam 1
Tomcat 1
2 results · Clear filters · Feed
-
Low 3.7CVE-2020-9488 Public exploit
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.…
-
Low 2.7
Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ
It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.