Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apache Flink Improper Access Control VulnerabilityPatch nowKEVEPSS 97.81%Jan 5, 2021
- Critical9.8Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 95.93%Dec 10, 2020
- Critical9.8Apache Airflow's Experimental API Authentication BypassPatch nowKEVEPSS 99.78%Nov 10, 2020
- UnknownApache Struts Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 96.95%Sep 14, 2020
- High8.8Apache Airflow Command InjectionPatch nowKEVEPSS 99.19%Jul 16, 2020
- High8.8Apache Kylin OS Command Injection VulnerabilityPatch nowKEVEPSS 97.34%May 22, 2020
- High7.0When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents an…Check this weekEPSS 55.52%May 20, 2020
- Critical9.8Apache Tomcat Improper Privilege Management VulnerabilityPatch nowKEVEPSS 99.27%Feb 24, 2020
- High7.8EyesOfNetwork Improper Privilege Management VulnerabilityPatch nowKEVEPSS 60.08%Feb 6, 2020
- UnknownApache Hadoop 2.7.3 and 2.7.4 YARN NodeManager Password DisclosurePatch nowKEVEPSS 3.57%Jan 16, 2020
- High7.5Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.57%Dec 30, 2019
- Unknownnetgain-systems enterprise_manager Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.15%Dec 13, 2019
- High7.2Apache Solr DataImportHandler Code Injection VulnerabilityPatch nowKEVEPSS 83.55%Aug 1, 2019
- High7.8Apache HTTP Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 65.00%Apr 8, 2019
- Medium4.3When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.Check this weekEPSS 97.68%Oct 4, 2018
- High8.1Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.99%Aug 22, 2018
- Medium5.4In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a m…Check if you run itEPSS 4.80%Jul 26, 2018
- Critical9.8The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable '…Check this weekEPSS 21.31%May 16, 2018
- UnknownGNU Bourne-Again Shell (Bash) Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 64.33%Mar 1, 2018
- Medium5.9The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC…Check this weekEPSS 17.07%Feb 28, 2018
- Medium6.5Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied…Check this weekEPSS 14.47%Feb 23, 2018
- High8.1Apache Tomcat Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.97%Oct 3, 2017
- High7.5When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources serv…Check this weekEPSS 70.12%Sep 19, 2017
- High8.1Apache Tomcat on Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.64%Sep 19, 2017
- High8.1Apache Struts Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.40%Sep 15, 2017