Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,130

Export CSV
CVE-2022-30126

Apache Tika Regular Expression Denial of Service in Standards Extractor

In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0

CVSS 3.1 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Tika Primavera Unifier Jboss Fuse
CVE-2022-29405

Apache Archiva Arbitrary user password reset vulnerability

In Apache Archiva, any registered user can reset password for any users. This is fixed in Archiva 2.2.8

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Apache
Products
Archiva
CVE-2022-29266

apisix/jwt-auth may leak secrets in error response

In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive information.

CVSS 3.1 · 7.5 High EPSS 8.1% KEV · Not listed
Vendors
Apache
Products
Apisix
CVE-2022-29265

Improper Restriction of XML External Entity References in Multiple Components

Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML External Entity references when configured with default property values: - EvaluateXPath - EvaluateXQuery - ValidateXml Apache NiFi flow configurations that include these Processors are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations in the default configuration for these Processors, and disallows XML External Entity resolution in standard services.

CVSS 3.1 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Apache
Products
Nifi
CVE-2022-29158

Regular Expression Denial of Service (ReDoS) vulnerability in Apache OFBiz

Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by external, unauthenticated users. Upgrade to 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12599

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Apache
Products
Ofbiz
CVE-2022-29063

Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz

The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In version 18.12.05 and earlier, by hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a server restart, in order to run arbitrary code. Upgrade to at least 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12646.

CVSS 3.1 · 9.8 Critical EPSS 5.1% KEV · Not listed
Vendors
Apache
Products
Ofbiz
CVE-2022-28890

Processing external DTDs

A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Apache
Products
Jena
CVE-2022-28889

Clickjacking in the web console

In Apache Druid 0.22.1 and earlier, the server did not set appropriate headers to prevent clickjacking. Druid 0.23.0 and later prevent clickjacking using the Content-Security-Policy header.

CVSS 3.1 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Apache
Products
Druid
CVE-2022-28732

Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin

A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.3 or later.

CVSS 3.1 · 6.1 Medium EPSS 82.8% KEV · Not listed
Vendors
Apache
Products
Jspwiki
CVE-2022-28731

Apache JSPWiki CSRF in UserPreferences.jsp

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page.

CVSS 3.1 · 6.5 Medium EPSS 58.7% KEV · Not listed
Vendors
Apache
Products
Jspwiki
CVE-2022-28730

Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp

A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce plugin dangerously renders user-supplied URLs. Upon re-testing CVE-2021-40369, it appears that the patch was incomplete as it was still possible to insert malicious input via the Denounce plugin. Apache JSPWiki users should upgrade to 2.11.3 or later.

CVSS 3.1 · 6.1 Medium EPSS 86.2% KEV · Not listed
Vendors
Apache
Products
Jspwiki
CVE-2022-28614

read beyond bounds via ap_rwrite()

The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Modules compiled and distributed separately from Apache HTTP Server that use the 'ap_rputs' function and may pass it a very large (INT_MAX or larger) string must be compiled against current headers to resolve the issue.

CVSS 3.1 · 5.3 Medium EPSS 5.1% KEV · Not listed
Vendors
Apache Fedoraproject Netapp and 1 more
Products
Http Server Fedora Clustered Data Ontap and 3 more
CVE-2022-28220

STARTTLS command injection in Apache JAMES

Apache James prior to release 3.6.3 and 3.7.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. Fix of CVE-2021-38542, which solved similar problem fron Apache James 3.6.1, is subject to a parser differential and do not take into account concurrent requests.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Apache
Products
James
CVE-2022-28129

Insufficient Validation of HTTP/1.x Headers

Improper Input Validation vulnerability in HTTP/1.1 header parsing of Apache Traffic Server allows an attacker to send invalid headers. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

CVSS 3.1 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Apache Debian Fedoraproject
Products
Traffic Server Debian Linux Fedora
CVE-2022-27479

SQL injection vulnerability in chart data API

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.

CVSS 3.1 · 9.8 Critical EPSS 2.9% KEV · Not listed
Vendors
Apache
Products
Superset
CVE-2022-27166

XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2

A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

CVSS 3.1 · 6.1 Medium EPSS 86.2% KEV · Not listed
Vendors
Apache
Products
Jspwiki
CVE-2022-26850

Insufficiently protected credentials

When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global read permissions. NiFi immediately moved the temporary file to the final configuration directory, which significantly limited the window of opportunity for access. NiFi 1.16.0 includes updates to replace the Login Identity Providers configuration without writing a file to the operating system temporary directory.

CVSS 3.1 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Apache
Products
Nifi