Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Buffer Over-read vulnerability in Apache HTTP Server.Check if you run itEPSS 0.95%May 4, 2026
- High8.8An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.Check if you run itEPSS 0.65%May 4, 2026
- Critical9.8The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches.Check if you run itEPSS 0.76%May 1, 2026
- Critical9.8The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches.Check if you run itEPSS 0.75%May 1, 2026
- High7.2Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API.Check if you run itEPSS 0.58%May 1, 2026
- High7.5Apache Neethi does not properly detect circular references in policy definitions.Check if you run itEPSS 0.80%May 1, 2026
- High7.5Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization.Check if you run itEPSS 0.74%May 1, 2026
- UnknownApache brpc Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 25.52%May 1, 2026
- Medium5.9Apache Airflow's SMTP provider called Python's without an SSL context, so no certificate validation was performed on the TLS upgrade.Check if you run itEPSS 0.27%Apr 30, 2026
- Critical9.8** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover.Check if you run itEPSS 0.74%Apr 28, 2026
- High8.7Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.Check if you run itEPSS 0.73%Apr 28, 2026
- Medium6.5Out-of-bounds Read vulnerability in Apache Thrift.Check if you run itEPSS 0.90%Apr 28, 2026
- Medium5.3Uncontrolled Recursion vulnerability in Apache Thrift.Check if you run itEPSS 1.10%Apr 28, 2026
- High7.3Integer Overflow or Wraparound vulnerability in Apache Thrift.Check if you run itEPSS 1.25%Apr 28, 2026
- High8.2Out-of-bounds Read vulnerability in Apache Thrift.Check if you run itEPSS 1.18%Apr 28, 2026
- High7.5Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.Check if you run itEPSS 1.16%Apr 28, 2026
- High7.5Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.Check if you run itEPSS 1.08%Apr 28, 2026
- Medium6.5Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS t…Check if you run itEPSS 0.45%Apr 27, 2026
- Medium4.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production…Check if you run itEPSS 0.28%Apr 27, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.Check if you run itEPSS 7.16%Apr 27, 2026
- High8.8The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner ConsulRegistryUtils.deserialize method) read Jav…Check if you run itEPSS 1.14%Apr 27, 2026
- Critical9.8The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incomplete.Check if you run itEPSS 0.75%Apr 27, 2026
- High8.8The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream…Check if you run itEPSS 1.22%Apr 27, 2026
- High8.2When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /a…Check if you run itEPSS 1.03%Apr 27, 2026
- Critical9.4The Camel-Mail component is vulnerable to Camel message header injection.Check if you run itEPSS 1.03%Apr 27, 2026