Apache

Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Soft

Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parame

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issu

The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the

Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 ar

Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affe

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affe

Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache

Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with co

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Dri

Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Tr

Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This iss

Insufficient input validation and sanitation in Weblog Category name, Website About and File Upload features in all vers

Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apa

Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retriev

An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and th

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute c

Improper Neutralization of Special Elements Used in an SQL Command ('SQL Injection') vulnerability in Apache Software Fo

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache In

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentic

Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent, which allows attackers to execute arbitr

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on

The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not

Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Function Worker. This issue affects A

Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG thro

Improper Authentication vulnerability in Apache Software Foundation Apache Pulsar Broker allows a client to stay connect

Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar. This issue affects Apache Pulsar: be

Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Broker's Rest Producer allows authenti

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disrupt

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized fi

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access t

SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user t

SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to

There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a r

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon. A malicious attacker can

** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects A

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provide

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Ap

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foun

A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. Th

A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response di