Apache

NewsSecurity Vulnerabilities

Apache Parquet Java – Potential malicious code execution from trusted packages (CVE-2025-46762)

Jason Davies 295 Views 0 Comments ,  ,  ,  0 min read

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code.

Read More
NewsSecurity Vulnerabilities

Apache ActiveMQ NMS Body Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2025-29953)

Jason Davies 356 Views 0 Comments ,  ,  ,  ,  0 min read

CVE-2025-29953 – This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache ActiveMQ NMS.

Read More
NewsSecurity Vulnerabilities

Apache Pinot Improper Neutralization of Special Elements Authentication Bypass Vulnerability (CVE-2024-56325)

Kerry Dean 406 Views 0 Comments ,  ,  ,  ,  0 min read

CVE-2024-56325 vulnerability allows remote attackers to bypass authentication on affected installations of Apache Pinot.

Read More
NewsSecurity Vulnerabilities

Apache Arrow R package – Arbitrary code execution when loading a malicious data file [CVE-2024-52338]

Jason Davies 395 Views 0 Comments ,  ,  ,  ,  1 min read

CVE number = CVE-2024-52338 Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0

Read More
Security VulnerabilitiesNews

Apache OFBiz resolveURI Authentication Bypass Vulnerability [CVE-2024-38856]

Jason Davies 842 Views 0 Comments ,  0 min read

CVE number = CVE-2024-38856 CVSS score = 9.8 This vulnerability allows remote attackers to bypass authentication on affected installations of

Read More
Security VulnerabilitiesNews

Apache OFBiz createRegister Error Message Information Disclosure Vulnerability [CVE-2024-23946]

Jason Davies 1454 Views 0 Comments ,  ,  ,  0 min read

CVE number = CVE-2024-23946 This vulnerability in Apache OFBiz allows remote attackers to disclose sensitive information on affected installations of

Read More
Security VulnerabilitiesNews

Remote code execution vulnerability found in Apache Struts 2 [CVE-2023-50164]

Kerry Dean 2061 Views 0 Comments ,  ,  ,  ,  1 min read

Apache has issued a warning to its users regarding a critical remote code execution (RCE) vulnerability found in its widely-used

Read More
Security VulnerabilitiesNews

Apache Batik DefaultScriptSecurity Server-Side Request Forgery Remote Code Execution Vulnerability [CVE-2022-40146]

Jason Davies 2080 Views 0 Comments ,  ,  ,  ,  ,  0 min read

CVE number – CVE-2022-40146 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache Batik. Interaction

Read More
Security VulnerabilitiesNews

Apache Batik DefaultExternalResourceSecurity Server-Side Request Forgery Information Disclosure Vulnerability [CVE-2022-38398]

Duncan 2046 Views 0 Comments ,  ,  ,  ,  0 min read

CVE number = CVE-2022-38398 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache Batik. Interaction

Read More
Security VulnerabilitiesNews

Apache HTTPD Server ap_escape_html2 Integer Overflow Remote Code Execution Vulnerability [CVE-2022-22721]

Luke Simmonds 2252 Views 0 Comments ,  ,  ,  ,  0 min read

CVE number – CVE-2022-22721 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache HTTPD Server.

Read More