Apache

NewsSecurity Vulnerabilities

Apache OFBiz createRegister Error Message Information Disclosure Vulnerability [CVE-2024-23946]

Jason Davies 665 Views 0 Comments ,  ,  ,  0 min read

CVE number = CVE-2024-23946 This vulnerability in Apache OFBiz allows remote attackers to disclose sensitive information on affected installations of

Read More
NewsSecurity Vulnerabilities

Remote code execution vulnerability found in Apache Struts 2 [CVE-2023-50164]

Kerry Dean 1409 Views 0 Comments ,  ,  ,  ,  1 min read

Apache has issued a warning to its users regarding a critical remote code execution (RCE) vulnerability found in its widely-used

Read More
NewsSecurity Vulnerabilities

Apache Batik DefaultScriptSecurity Server-Side Request Forgery Remote Code Execution Vulnerability [CVE-2022-40146]

Jason Davies 1542 Views 0 Comments ,  ,  ,  ,  ,  0 min read

CVE number – CVE-2022-40146 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache Batik. Interaction

Read More
NewsSecurity Vulnerabilities

Apache Batik DefaultExternalResourceSecurity Server-Side Request Forgery Information Disclosure Vulnerability [CVE-2022-38398]

Duncan 1480 Views 0 Comments ,  ,  ,  ,  0 min read

CVE number = CVE-2022-38398 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache Batik. Interaction

Read More
NewsSecurity Vulnerabilities

Apache HTTPD Server ap_escape_html2 Integer Overflow Remote Code Execution Vulnerability [CVE-2022-22721]

Luke Simmonds 1693 Views 0 Comments ,  ,  ,  ,  0 min read

CVE number – CVE-2022-22721 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apache HTTPD Server.

Read More
NewsSecurity Vulnerabilities

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability [CVE-2021-45105]

Duncan 2058 Views 0 Comments ,  ,  0 min read

Please note that this vulnerability is not the main well known Log4j one, for further information on CVE-2021-44228 please click

Read More
NewsSecurity Vulnerabilities

Critical Apache Log4j remote code execution vulnerability [CVE-2021-44228]

Duncan 4107 Views 0 Comments ,  ,  ,  ,  4 min read

A critical remote code execution vulnerability in Apache Foundation Log4j library has been discovered. This vulnerability has been dubbed Log4Shell.

Read More
NewsSecurity Vulnerabilities

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 (CVE-2021-41773)

Duncan 1592 Views 0 Comments ,  ,  ,  0 min read

CVE number = CVE-2021-41773 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49.

Read More
NewsSecurity Vulnerabilities

Path Traversal and Remote Code Execution in Apache HTTP Server (incomplete fix of CVE-2021-41773) (CVE-2021-42013)

Duncan 1839 Views 0 Comments ,  ,  0 min read

It was discovered that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a

Read More
NewsSecurity Vulnerabilities

Apache Tomcat – Denial of service vulnerability [CVE-2021-42340]

Duncan 2282 Views 0 Comments ,  ,  ,  0 min read

CVE number – CVE-2021-42340 The Apache Software Foundation has released a security advisory to address a vulnerability in multiple versions

Read More