Vulnerabilidades de Apache Software Foundation
CVEs publicadas que afetam produtos de Apache Software Foundation: 1344 registro(s), com severidade, exploração e correções.
Tomcat 124Camel 97Thrift 86Airflow 72Apache HTTP Server 55Traffic Server 43Apache ActiveMQ 41Cxf 38Syncope 34Apisix 29Cloudstack 29Kylin 28Struts 27Answer 27Ofbiz 24Dolphinscheduler 23Apache ActiveMQ All 20Apache Roller 18Nifi 17Iotdb 16Apache ActiveMQ Broker 15Wicket 15Mina Sshd 14Allura 13Qpid Broker-j 13Ranger 12Log4j 11Shiro 11Jmeter 11Neethi 11Inlong 10Fory 10Artemis 10Nimble 10Apache ActiveMQ Artemis 9Superset 8Apache-airflow-providers-fab 8Openoffice 8Zookeeper 8Karaf 8
CVE-2014-0096
Média · 4.3
CWE-264 31/05/2014
Improper Input Validation in Apache Tomcat
java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrictions and read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-0075
Média · 5.0
CWE-189 31/05/2014
Integer Overflow or Wraparound in Apache Tomcat
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumption) via a malformed chunk size in chunked transfer coding of a request during the streaming of data.
CVE-2014-0114
Alta · 7.5
Exploit público CWE-20 30/04/2014
Arbitrary code execution in Apache Commons BeanUtils
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.
CVE-2014-0050
Alta · 7.5
Exploit público CWE-264 01/04/2014
Permissions, Privileges, and Access Controls em Oracle Retail Applications
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.
CVE-2013-4590
Média · 4.3
CWE-200 26/02/2014
Exposure of Sensitive Information em Apache Software Foundation Tomcat
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2013-4322
Média · 4.3
CWE-20 26/02/2014
Improper Input Validation em Apache Software Foundation Tomcat
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.
CVE-2013-4286
Média · 5.8
CWE-20 26/02/2014
Improper Input Validation em Apache Software Foundation Tomcat
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.
CVE-2013-2251
Crítica · 9.8
KEV Urgente · 83 Exploit público CWE-74 20/07/2013
Apache Struts Improper Input Validation Vulnerability
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
CVE-2013-2067
Média · 6.8
CWE-287 01/06/2013
Improper Authentication em Apache Software Foundation Tomcat
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.
CVE-2012-3544
Média · 5.0
CWE-20 01/06/2013
Improper Input Validation em Apache Software Foundation Tomcat
Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
CVE-2013-0248
Média · 6.8
CWE-264 15/03/2013
Permissions, Privileges, and Access Controls em Apache Software Foundation Commons Fileupload
The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.
CVE-2012-4534
Baixa · 2.6
CWE-399 19/12/2012
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x…
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
CVE-2012-4431
Média · 4.3
CWE-264 19/12/2012
Permissions, Privileges, and Access Controls em Apache Software Foundation Tomcat
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.
CVE-2012-5568
Média · 5.0
30/11/2012
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon…
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
CVE-2012-5887
Média · 5.0
CWE-287 17/11/2012
Improper Authentication em Apache Software Foundation Tomcat
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
CVE-2012-5886
Média · 5.0
CWE-287 17/11/2012
Improper Authentication em Apache Software Foundation Tomcat
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.
CVE-2012-5885
Média · 5.0
CWE-264 17/11/2012
Permissions, Privileges, and Access Controls em Apache Software Foundation Tomcat
The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.
CVE-2012-0391
Crítica · 9.8
KEV Urgente · 83 Exploit público CWE-94 08/01/2012
Apache Struts 2 Improper Input Validation Vulnerability
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.
CVE-2006-1547
Alta · 7.5
KEV Alta · 59 CWE-749 30/03/2006
Apache Struts 1 ActionForm Denial-of-Service Vulnerability
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.