Apache

91 results · Feed

• High 7.5
  CVE-2019-0194

  Path Traversal in Apache Camel

  Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

  Apache Apache Camel org.apache.camel:camel-core Maven
  Apr 30, 2019
• High 8.1
  CVE-2019-0232 Public exploit EPSS 100%

  Apache Tomcat OS Command Injection vulnerability

  When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windo…

  Apache Tomcat org.apache.tomcat.embed:tomcat-embed-core Maven
  Apr 15, 2019
• High 7.8
  CVE-2019-0211 Exploited Public exploit EPSS 65%

  In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019

  KEV Nov 3, 2021
• Unscored —
  CVE-2019-0217 Public exploit EPSS 16%

  In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded serv…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019
• Unscored —
  CVE-2019-0215 EPSS 10%

  In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verif…

  Apache Apache HTTP Server apache2 apache2 Debian Alpine
  Apr 8, 2019
• High 7.5
  CVE-2019-0212

  Improper Authorization in org.apache.hbase:hbase

  In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not …

  Apache Apache HBase org.apache.hbase:hbase Maven
  Mar 28, 2019
• High 7.5
  CVE-2019-0222 Public exploit EPSS 12%

  Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client

  In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

  Apache Apache ActiveMQ activemq activemq Debian Ubuntu Maven
  Mar 28, 2019
• High 7.5
  CVE-2019-0225 Public exploit

  Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war

  A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.

  Apache Apache JSPWiki org.apache.jspwiki:jspwiki-war Maven
  Mar 28, 2019
• Medium 6.1
  CVE-2019-0224

  Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main

  In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on i…

  Apache Apache JSPWiki org.apache.jspwiki:jspwiki-main Maven
  Mar 28, 2019
• High 7.8
  CVE-2019-0204

  Docker image code execution with Apache Mesos

  A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A…

  Apache Apache Mesos org.apache.mesos:mesos Maven
  Mar 25, 2019
• Medium 6.5
  CVE-2019-0191

  Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf

  Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validat…

  Apache Apache Karaf org.apache.karaf:apache-karaf org.apache.karaf:karaf Maven
  Mar 20, 2019